Type Alias: ExtensionTrustTier

ExtensionTrustTier = "untrusted" | "signed" | "marketplace"

Defined in: Extensions/ExtensionManifest.ts:313

How much provenance the app can vouch for. Tiers, deliberately not a gate: an unsigned extension still installs, it is simply marked untrusted and must have its permissions approved.

• untrusted — sideloaded, unsigned, or signed by a publisher we don't know. The default and the common case for self-published extensions.
• signed — signature is intact AND the signing key is in the app's trusted-publisher set. Earns the "Verified publisher" badge.
• marketplace — came from the curated catalog. Nothing emits this yet; the catalog lands in Phase 4.