- required plugins resolve transitively against the registry, each at the newest release meeting the framework and its minimum, dependencies first - an installed requirement below its minimum stops with a plugin:update hint; cycles in registry data are reported - one go get for the whole set; plugins sharing a module share a release - behavior subtests: deps, installed_old, cycle, pin, unknown, prompt, offline, invalid