v0.0.2 — Docs sync with BOX v0.1.0; airgap boundary clarified

Docs-only release. The cloud variant (mrdulasolutions/BOX) shipped v0.1.0 with extensive Box AI integration. This release documents the deliberate boundary — Box AI is server-side and cannot be reached from an air-gapped plugin by construction. No code or skill changes.

What changed

• .schema-pin bumped to mrdulasolutions/BOX@7403fb0 (the cloud's v0.1.0 release commit). Picks up new operational notes 7 (Hub indexing warm-up) and 8 (SDK v10.6.0 tags breaking change) into synced/operational-notes.md.
• references/airgap-trust-model.md — explicit section "Box AI features are deliberately not reachable from this plugin" documenting: what the cloud offers, why none of it works on-prem, trade-off table per feature, air-gap-compatible alternatives (self-hosted LLM, local OCR, local vector DB).

Air-gap guarantees unchanged

The plugin still makes zero outbound calls to Box during skill execution. All five CI gates pass: claude plugin validate, ci-check-airgap.sh, ci-check-schema-sync.sh.

Verification

Artifact	SHA256
box-memory-onprem-plugin.zip	3e1aecb20e22902e7eb0e23ea36d22afa10618ae6a157ae959dfc047bf95fa76
box-memory-onprem-skills.zip	503e4a2260308ae12ec52eac353fe1e64494dc7cb1ac8564ffd1de225e0a66fa

Install

mkdir -p ~/.claude/plugins/box-memory-onprem
curl -L -o /tmp/plugin.zip https://github.com/mrdulasolutions/BOX-Onprem/releases/latest/download/box-memory-onprem-plugin.zip
unzip -o /tmp/plugin.zip -d ~/.claude/plugins/box-memory-onprem/

Or for Cowork (admin): Settings → Plugins → Add plugin → upload the zip.

When to install both variants

If your workflow has both air-gapped portions (regulated data) and online portions (general work), install both. They have separate plugin namespaces (box-memory: vs box-memory-onprem:) and don't conflict. Pick per workflow.