extensions field for custom metadata, and the following rules govern how extensions should behave.
- Agents MAY declare additional metadata such as domain-specific configuration, advisory classifications, or discovery hints.
- Extension points MUST NOT violate the ICS/ES separation.
- Extension metadata MUST NOT be treated as an authorization grant.
- Extension namespaces SHOULD use reverse-domain notation to avoid collisions.