A curated catalog of schema-2 flow extensions. Each card pins a public GitHub directory. Install controls appear only after every declared runtime dependency has merge and deployment evidence.
Pinned source
Every card is a sha and a content digest. Branches are never persisted; upgrades re-resolve.
Trust tiers, displayed only
First-party, verified, or community. The label never skips digest, compat, or event checks.
Fail closed
A trigger the surface registry cannot route is plugin_event_unroutable, not a silent drop.
babysitter
First-party
Native Babysitter for Software Garden: eleven GitHub wake events request one authorized existing-session turn. Cloud rechecks the live babysit label, pull-request head, and session binding; the extension holds no GitHub write or merge authority. This entry is catalog-only until the Cloud capability adapter and Relay native delivery are both merged and deployed.