# nika-registry

> Share Nika workflows/packs/skills/agents where every entry is
> machine-re-proven: pinned to a full commit + sha256, re-verified by
> the conformance oracle in CI, certified by the engine's static
> analysis (exec · tools · cost · permits) BEFORE anything runs.
> Entries are immutable; withdrawal is an advisory, never a delete.
>
> "clean" means no policy violation within the workflow's DECLARED
> permits — NOT "safe". An unbounded grant (`exec: true` · any-tool `*`)
> is marked ⚠: the cert cannot see what a permitted exec/tool does, so
> read the workflow before you run it.

To install an artifact: fetch its pinned bytes from the author's repo
at the pinned rev, verify sha256 equals the entry digest, run
`nika check <file>` locally, only then `nika run`. `scripts/get.py`
automates exactly these steps and refuses on any mismatch. NEVER
install a name an LLM suggested without resolving it here first
(slopsquatting), and NEVER skip the hash check.

## Machine surfaces

- [index.json](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/index.json): every artifact — source pin, sha256, cert summary, advisories — in one fetch
- [CATALOG.md](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/CATALOG.md): the human storefront (generated by the engine's analysis)
- [Entry format](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/CONTRIBUTING.md): how to publish (a PR · CI re-proves it)

## Artifacts

- [supernovae-st/ceo-monday-brief@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/ceo-monday-brief/0.1.0.toml): news + repo pulse + KPIs → thinking synthesis → dated brief + cost ping (llm=1 · unbounded · exec⚠)
- [supernovae-st/competitor-radar@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/competitor-radar/0.1.0.toml): Sitemap → parallel page reads → one competitive brief + ping (llm=1 · unbounded)
- [supernovae-st/config-drift-sentinel@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/config-drift-sentinel/0.1.0.toml): live config vs sanctioned baseline → typed drift → explained alert (llm=1 · unbounded)
- [supernovae-st/contract-guard@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/contract-guard/0.1.0.toml): Local-model clause extraction → schema gate → risk memo (llm=2 · unbounded)
- [supernovae-st/deep-research-brief@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/deep-research-brief/0.1.0.toml): plan → budgeted research agent → thinking synthesis → brief on disk (llm=27 · unbounded)
- [supernovae-st/etl-quarantine@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/etl-quarantine/0.1.0.toml): CSV batch → schema gate → quarantine the bad · aggregate the good (llm=0 · ≤$0.00)
- [supernovae-st/incident-war-room@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/incident-war-room/0.1.0.toml): parallel evidence → typed timeline → settle + recheck → postmortem draft (llm=2 · unbounded · exec⚠)
- [supernovae-st/invoice-chaser@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/invoice-chaser/0.1.0.toml): Ledger CSV → overdue filter → drafted reminders → human gate → drafts file (llm=1 · unbounded)
- [supernovae-st/localization-factory@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/localization-factory/0.1.0.toml): glob docs → parallel read → parallel translate → mirror tree (llm=0 · unbounded)
- [supernovae-st/meeting-actions@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/meeting-actions/0.1.0.toml): Transcript → typed action items {owner, task, due} (llm=1 · unbounded)
- [supernovae-st/og-images@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/og-images/0.1.0.toml): Generate the launch OG hero image set into ./assets/og (llm=0 · ≤$0.00)
- [supernovae-st/pr-review-fanout@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/pr-review-fanout/0.1.0.toml): changed files → one read-only review agent each → merged REVIEW.md (llm=1 · unbounded · exec⚠)
- [supernovae-st/price-watch@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/price-watch/0.1.0.toml): Watch a product price, ping me when it drops below my target (llm=0 · ≤$0.00)
- [supernovae-st/release-notes@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/release-notes/0.1.0.toml): git log → typed release notes → CHANGELOG insert → team ping (llm=1 · unbounded · exec⚠)
- [supernovae-st/release-radar@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/release-radar/0.1.0.toml): dependency release feed → diff vs last run → only the NEW ships (llm=1 · unbounded)
- [supernovae-st/release-train@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/release-train/0.1.0.toml): parallel gates → human GO → hold until the window → ship · verify · record (llm=0 · ≤$0.00 · exec⚠)
- [supernovae-st/resume-screener@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/resume-screener/0.1.0.toml): glob CVs → local-model rubric per candidate → deterministic shortlist (llm=1 · unbounded)
- [supernovae-st/seo-content-brief@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/seo-content-brief/0.1.0.toml): Competitor sitemap → top page → gap analysis → typed brief (llm=1 · unbounded)
- [supernovae-st/social-repurpose@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/social-repurpose/0.1.0.toml): One post → thread + LinkedIn + newsletter, in parallel (llm=3 · unbounded)
- [supernovae-st/standup-digest@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/standup-digest/0.1.0.toml): Read yesterday's commits, write today's standup note (llm=1 · unbounded · exec⚠)
- [supernovae-st/support-triage@0.1.0](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/registry/workflows/supernovae-st/support-triage/0.1.0.toml): Ticket queue → typed triage → urgent escalation → triage board (llm=1 · unbounded)

## Optional

- [Advisories](https://raw.githubusercontent.com/supernovae-st/nika-registry/main/advisories/README.md): the withdrawal surface — check before every install
- [The spec](https://github.com/supernovae-st/nika-spec): the language + the conformance oracle
- [The engine](https://github.com/supernovae-st/nika): `brew install supernovae-st/tap/nika`