Skip to main content
Nika workflows are one portable .nika.yaml file, so sharing one is just sharing text. nika-registry is where that sharing gets a trust layer no other workflow registry has: every entry is re-proven by CI — pinned to a full commit + sha256, re-run through the conformance oracle, and certified by the engine’s static analysis. You see what a workflow can do — exec, tools, cost ceiling, secrets — before a single token is spent.
Trust lives in the artifact, not a gatekeeper: the certificate re-derives locally with nika check. You never have to believe the registry — you re-run the proof yourself, offline.

​
Install an artifact

Today the flow is a short, auditable script (the nika add verb is on the engine roadmap):
get.py refuses on any mismatch (hash · advisory · file already there) and never executes anything — the workflow lands on disk and you decide to run it. Not curl | sh.

​
The guarantees

​
Machine surfaces (for agents)

  • index.json — every artifact with its pin, digest, cert summary and advisory state in one fetch
  • llms.txt — the consume/verify path in agent-readable form

​
Publish

Your artifact stays in your git repo — the registry stores a pointer, a digest and a proof, never a copy. Open a PR adding an entry under your GitHub-owner namespace; CI re-proves it. See the contributing guide.