skills/product-app-architect/references/official_source_registry.md

# Official Source Registry

Use these sources when current product, platform, security, accessibility, or plugin behavior materially affects the answer. Prefer the latest version of each official source.

## OpenAI plugin packaging and submission
- Plugin packaging: https://developers.openai.com/plugins/build/plugins
- Skills: https://developers.openai.com/plugins/build/skills
- Submission: https://developers.openai.com/plugins/deploy/submission
- Submission errors and metadata limits: https://developers.openai.com/plugins/deploy/submission-errors

## Application security
- OWASP Application Security Verification Standard (ASVS): https://owasp.org/projects/asvs

Use OWASP as a verification/reference standard, not as a reason to dump a generic security checklist into every product plan.

## Web accessibility
- WCAG 2.2: https://www.w3.org/TR/WCAG22/
- WAI-ARIA Authoring Practices Guide: https://www.w3.org/WAI/ARIA/apg/

Use current WCAG guidance when specific web conformance requirements matter. Prefer native HTML semantics before unnecessary ARIA.

## Apple platform design and distribution
- Human Interface Guidelines: https://developer.apple.com/design/human-interface-guidelines/
- App Store guidelines: https://developer.apple.com/app-store/guidelines/

Use these when designing native Apple experiences or when App Store requirements can change scope or launch readiness.