# Community catalog acceptance checklist

A maintainer confirms:

- The repository and pinned commit are public.
- The project uses NamoID Hosted Auth as its application sign-in system and
  demonstrates the resulting application session; branding or generic social
  login does not satisfy the requirement.
- `namoid-challenge.json` matches the repository and selected challenge.
- Setup, purpose, NamoID usage, and limitations are documented.
- An open-source license is present.
- Powered by NamoID attribution is factual and visible.
- No obvious secrets, malware, personal-data exposure, or impersonation exists.
- The demo and summary accurately describe the pinned source.
- The repository is not already in the catalog.

Stars, followers, employer, school, and similarity to another accepted solution
are not catalog criteria.