HOW IMWA WORKS
The URL stays universal. The capability path gets specific.
IMWA adds a broker between your WordPress experience and the device. The broker discovers available providers, checks consent and license state, then routes a bounded job through the best eligible path.
Six checks before hardware work begins.
Domain lease
The parent validates a signed lease bound to the normalized WordPress origin and installation ID.
Runtime election
One owner controls the manifest, root service worker, install surfaces, and browser push path.
Consent grant
The requested purpose, capability, precision, duration, and viewer are checked before a provider runs.
Provider discovery
The broker ranks registered browser, Shortcut, native, and edge providers for the current device.
Signed exchange
Short-lived tickets and replay-resistant events connect the provider to the external data plane.
Truthful projection
WordPress receives only bounded state such as last update, verified NFC action, or notification outcome.
The same JavaScript request can land on a different implementation.
Extend the edge without forking the foundation.
Parent-only security boundaryLicensing, runtime ownership, schemas, migrations, signing, and updates remain final.
Child-owned additionsRegister providers, notification sources, admin sections, presentation, and site-specific adapters.
Contribution-readyExtensions can be reviewed and shared without editing the commercial parent plugin.