%% Standard plug-in bootstrap sequence (Mermaid)
sequenceDiagram
    autonumber
    participant Operator as Operator / DevOps
    participant Host as Authority Host
    participant Registrar as StandardPluginRegistrar
    participant Store as Credential Store
    participant Audit as Audit Sink
    participant Telemetry as Telemetry Pipeline

    Operator->>Host: Deploy plugin manifest + offline secrets bundle
    Host->>Registrar: Load options + validate capabilities
    Registrar->>Store: Ensure collections + indexes
    Registrar->>Store: Seed bootstrap principals (hashed passwords, roles)
    Store-->>Registrar: Acknowledge deterministic bootstrap state
    Registrar-->>Host: Register IIdentityProviderPlugin + capability metadata
    Host->>Registrar: Invoke WarmupAsync (health checks, secret validation)
    Registrar->>Audit: Emit authority.plugin.load event
    Registrar->>Telemetry: Emit structured logs and counters
    Host-->>Operator: Report readiness (plugin lifecycle complete)