The Unicode Layer Your Validator Can't See

A schema validator reads parsed structure. It never sees the bytes. That gap is where a whole class of supply-chain attack lives. The claude-code-plugins marketplace already ran a schema validator ove