[Eduard van Valkenburg (eavanvalkenburg)]

Motivation & Context

External Agent Framework integrations do not have an authoritative, SDK-specific discovery surface or a consistent eligibility policy. This change adds source catalogs in the code repository for the Agent Framework team to sync to Microsoft Learn while keeping project ownership, support, compatibility, and security guidance with each external maintainer.

Description & Review Guide

• What are the major changes? Adds Python and .NET community-project catalog pages with the required disclaimer and component-based schema; seeds the Python catalog with the verified Engram and MemorySync integrations; adds a normative review skill covering publication, project, support-link, wording, exclusion, ordering, and cross-SDK checks; wires that skill into pull-request reviews; and links both catalogs from the sample READMEs.
• What is the impact of these changes? Readers gain a focused discovery surface for published community integrations, while contributors and reviewers gain a repeatable process that excludes planned work, compatibility-only endpoints, standard OTLP destinations, official Microsoft integrations, and projects without external issue handling. There is no runtime or public API impact.
• What do you want reviewers to focus on? The eligibility rules, the component placement and neutral wording of the initial Python entries, and the repository-to-Microsoft Learn synchronization guidance.

Related Issue

Closes #6341

Contribution Checklist

• The code builds clean without any errors or warnings
• All unit tests pass, and I have added new tests where possible
• The PR follows the Contribution Guidelines
• This PR is linked to an issue and there is no other open PR for this issue (see Related Issue above).
• This is not a breaking change. If it is a breaking change, add the breaking change label (or add "[BREAKING]" to the title prefix, before or after any language prefix) — a workflow keeps the label and title prefix in sync automatically.

[Copilot]

Copilot review overview

🟢 Approval recommended

The catalogs, external links, disclaimer, schema, and review guidance are consistent and complete.

Review effort: Balanced
Findings: None

What changed in this PR

Adds SDK-specific catalogs for discovering eligible community integrations and defines their review policy.

Changes:

• Adds Python and .NET community-project catalogs and README links.
• Lists verified Engram and MemorySync Python integrations.
• Adds and wires catalog eligibility guidance.

File	Description
python/​samples/​README.md	Links the Python catalog.
python/​samples/​community-projects.md	Adds Python entries and disclaimer.
dotnet/​samples/​README.md	Links the .NET catalog.
dotnet/​samples/​community-projects.md	Adds the empty .NET catalog.
.github/​skills/​pull-requests/​SKILL.md	Triggers catalog review guidance.
.github/​skills/​community-projects/​SKILL.md	Defines eligibility and review rules.

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

MAF Automated Review — Iteration 1

Result: Findings reported
Scope: full PR (1 commit(s)): b6361c2e660a
Model: gpt-5.6-sol

Overview

The PR establishes SDK-specific community catalogs with strong eligibility, ownership, support-link, taxonomy, and cross-SDK guardrails, and the initial entries satisfy those catalog rules. The review workflow also correctly requires direct inspection rather than accepting maintainer assertions. However, that inspection crosses into submitter-controlled content without defining an untrusted-content boundary, leaving automated reviewers exposed to prompt-injection attempts.

Reviewed the supplied pull-request change set across correctness, security/reliability, architecture, and failure behavior.
1 verified finding remained after source verification (1 medium) across 1 file. Details are attached to the affected lines below.

Affected areas: .github/skills/community-projects/SKILL.md

[Jose Alvarez (jpalvarezl)]

Rule	Result	Evidence
Complete submission	Pass	Both entries provide all catalog fields, identify Python integrations, and are presented as published reader-facing projects.
Project URL shape	Pass	Engram links to its project repository; MemorySync links to its project-specific package page.
Direct external issue-creation URL shape	Pass	Both issue links use external GitHub /issues/new/choose paths.
Markdown link check	Pass	The markdown-link-check workflow passed on the current head.
Allowed primary component and table shape	Pass	Engram is listed once under Tools and MemorySync once under Context providers; both tables use the required five columns.
Neutral wording	Pass	Names, descriptions, and scenarios are factual and make no Microsoft ownership, support, endorsement, testing, or compatibility claims.
Exclusions	Pass	Neither entry is an official Microsoft integration, generic endpoint/OTLP listing, planned project, or Microsoft-routed support link.
Ordering and cross-SDK consistency	Pass	Each populated component contains one correctly placed row; no unsupported .NET copy was added.

Eligible