Draft extension protocol v0.1 and restart-based Host profile

[Lucas1479]

Problem and scope

This draft defines a reviewable v0.1 manifest, lifecycle and permission contract, with JSON Schema, validator, contract sketches and five declarative examples. It is aligned with the experimental Amadeus Host profile: local-wheel TTS/MCP/Skill, backend-restart activation, Electron-owned installation/removal, explicit child environment bindings and no Host Grants. TTS/MCP/Skill remain provisional; schema validation does not claim full protocol conformance or a stable SDK.

Review alignment

• The pilot acceptance table now uses restart semantics, without a generation/drain handoff requirement. Fish covers Japanese/English; MiMo is English-only, with live English acceptance still pending.
• Cancellation drops late audio and bounds unacknowledged work. Slow network cleanup is not assigned an undocumented two-second crash deadline or charged against crash recovery budget.
• Language support matches primary tags; this Host sends neutral speed=1.0 without GPT-SoVITS sentence pacing.
• Per-contribution Skill revisions allow additive bindings on existing sessions; changes/removals of recorded bindings require a new session. Native-path conflicts are observable without disabling ordinary Agent tasks. Older opaque-digest handles have an explicit migration limit.
• Start review with spec/extension-protocol-v0.1.md §1.3–1.3.1 and spec/contracts/voice-v0.md, then lifecycle and permission boundaries.

Broader context/observer/memory sections remain future design, outside this implementation. Ordinary files and AUIP are Work outputs, not installed extensions. DSH stdout contamination and Windows WRITE_OWNER requirements remain documented experimental limits.

Validation and related changes

• python -m pytest -q: 61 passed, 1 skipped (Windows symlink privilege).
• git diff --check: passed.
• Host copies have pinned provenance plus an offline drift test; verification against the canonical source passed. Schema/validator files are unchanged by this documentation-alignment commit, so their source pin remains 1463c6bc2b71f21f0adecee40e2daa222dc9e85b.
• Host implementation, SDK, examples and lifecycle fixes: Add experimental extension lifecycle with native Agent bindings Amadeus#188
• Independent Work file/AUIP boundary review: Separate registered Work files from verified AUIP applications Amadeus#189

Keep draft for maintainer/Claude review. Neither this document nor the implementation constitutes a stable SDK release.