Plugins, Sandbox Access Controls, and Async Subagents — The AI Wire