App Vetting - review marketplace apps and keep the update door shut

Check how a B2B SaaS marketplace reviews, re-reviews and removes third-party apps, then write the review-process design and the developer policy. Free in your browser: the single hard gate, staged fast path, two-rung ladder and functional review ranked by the data apps can reach and by reviewer capacity; re-review triggers checked for objectivity; the publish-channel controls the marketplace needs - FIDO 2FA, short-lived tokens, a propagation hold, OIDC publishing, signed artifacts; the appeal checked for policy citations, an independent reviewer and a turnaround; and the six-rung enforcement ladder checked for owners, notice and evidence - a developer self-check and a ladder CSV. A metered run writes the review process, or the developer policy. Built on the SkillSafe skill @samber/app-marketplace-review, from samber/developer-platform-skills (MIT), by Samuel Berthe.