Core principles

ISA Warden extensions must follow these principles:

1. Prefer host capabilities over reimplementing host behavior.
2. Respect current-user and workspace rights.
3. Reuse the ISA Warden design system before adding custom styling.
4. Default to the host stack where practical.
5. Keep permissions minimal and explicit.
6. Treat custom local databases as an exception, not a default.
7. Document implemented versus planned capabilities clearly.