Verification stages your agents must pass.
A plugin is one command that registers a stage in your harness, ships working scaffolding, and becomes part of every agent's definition of done. Framework checks, security scans, backend validation, all in the same registry with the same evidence trail.
har env add-plugin <id>Plugin docs 
Playwright
Browser e2e · Web appsBrowser e2e verification with frontend, API health, and accessibility smoke specs.
add-plugin playwrightstage: browser-e2e
RocketSim
iOS simulator flows · iOS appsScripted iOS Simulator flows so agents verify app behavior, not just compilation.
add-plugin rocketsimstage: rocketsim-flows
Kerno
Backend validation · Backend servicesDeterministic backend scenario re-runs with greybox database checks — no LLM in the loop.
add-plugin kernostage: backend-validation
Gitleaks
Secrets scanning · Any stackCatch leaked credentials in agent worktrees before they ever reach a branch.
add-plugin gitleaksstage: secrets-scanTrivy
Vulnerabilities & IaC · Any stackDependency CVEs and Terraform, Docker, and Kubernetes misconfigurations, caught pre-merge.
add-plugin trivystage: vuln-scan
Semgrep
Static analysis (SAST) · Any stackStatic analysis on every agent worktree, with a native path to compliance evidence.
add-plugin semgrepstage: sastYour own stages
Custom · Any stackProject-specific checks don't need a plugin. Register them as custom stages with one command, or package your own plugin.
add-stage <id> --customStages guide