Verified sources
8 requested projects were matched to authoritative repositories and classified for controlled adoption.
Research Lab
Governed external repository intake
Verified repository identities, intended SONARA placement, license posture, safety boundaries, and staged next actions.
Rejected sources
2 supplied links remain blocked because the repository or claimed project could not be verified.
Production boundary
No third-party repository is cloned, installed, executed, or enabled in the production web process by this catalog.
OpenHands: developer only
Source: OpenHands/OpenHands. Class: developer agent platform. Placement: Dedicated development machine or isolated worker; never the production web process. License: MIT outside enterprise/; enterprise directory has separate terms. Capabilities: agent sessions, reviewable automations, GitHub issue decomposition, multiple agent backends. Next: Pilot on a disposable branch with read-only repository tasks before allowing reviewed patch creation.
Caveman: reference only
Source: JuliusBrussee/caveman. Class: prompt skill. Placement: Developer tools and optional internal prompt profiles. License: MIT. Capabilities: response brevity profile, commit-message profile, review-comment profile, token-usage measurement concepts. Next: Implement a SONARA-owned concise-output profile and benchmark it before adopting any external installer.
Agency Agents: curated reference
Source: msitarzewski/agency-agents. The supplied sonoisa/agency-agents link was not found; the matching maintained repository is msitarzewski/agency-agents. Class: agent prompt library. Placement: Prompt Library and internal development playbooks. License: MIT. Capabilities: specialist role templates, deliverable checklists, review patterns, workflow prompts. Next: Curate a small approved set: code reviewer, technical writer, database optimizer, accessibility specialist, and incident commander.
Meetily: optional adapter after review
Source: Zackriya-Solutions/meetily. Class: desktop companion. Placement: User desktop; SONARA receives explicit user-approved exports only. License: MIT for the Community Edition; PRO is a separate product/codebase. Capabilities: local transcription, meeting summaries, audio import, local model support. Next: Add a user-controlled transcript/summary import flow rather than embedding the desktop application into Vercel.
OfficeCLI: optional adapter after review
Source: iOfficeAI/OfficeCLI. The supplied nicobrenner/officecli link was not found; the matching OfficeCLI project is iOfficeAI/OfficeCLI. Class: document worker. Placement: Isolated background worker with a temporary workspace. License: Apache-2.0. Capabilities: DOCX generation, XLSX generation, PPTX generation, document rendering, structured document inspection. Next: Build a queue-backed artifact worker contract and test deterministic DOCX/XLSX/PPTX creation in an isolated container.
OpenWiki: developer only
Source: langchain-ai/openwiki. The supplied nicosxt/openwiki link was not found; the matching maintained project is langchain-ai/openwiki. Class: developer cli. Placement: Development CI or a locked-down documentation worker. License: MIT. Capabilities: repository wiki generation, documentation updates, AGENTS.md maintenance, scheduled documentation pull requests. Next: Run code-mode documentation generation on a disposable branch and compare output with existing SONARA docs before CI adoption.
OmniRoute: blocked
Requested source is unverified and blocked. The supplied repository could not be verified, and no authoritative repository matching the navigation-engine claims was identified. Class: unverified external source. Placement: Not admitted to SONARA. License: Unverified. Next: Obtain the authoritative repository or project website, then perform license, architecture, benchmark, and security review.
Strix: staging only
Source: usestrix/strix. The supplied strixsec/strix link was not found; the matching maintained project is usestrix/strix. Class: security testing tool. Placement: Isolated security environment against explicitly authorized SONARA targets only. License: Apache-2.0. Capabilities: authorized SAST/DAST, vulnerability validation, security reports, remediation suggestions. Next: Begin with source/diff-scoped scans in an isolated staging copy; do not enable black-box exploitation against production.
ASI Agent Skills: quarantined reference
Source: plurigrid/asi. Class: agent skill library. Placement: Offline review sandbox; selected skills may be rewritten into SONARA-owned modules. License: Apache-2.0 stated upstream. Capabilities: skill discovery, agent workflow references, security-tool references, scientific and systems research prompts. Next: Create a five-skill pilot allowlist after individual source, license, and behavior review.
Awesome Design MD: blocked
Requested source is unverified and blocked. The supplied repository could not be verified, and no authoritative source matching the post was identified. Class: unverified external source. Placement: Not admitted to SONARA. License: Unverified. Next: Request the correct repository URL or replace it with internally authored README, wiki, and project-page templates.