This page will eventually collect all the guidelines we recommend for app-store curators.

The general principle should be that anything that crosses a trust boundary should be checked.

For now, here are the design documents and wiki pages that are relevant to this topic. This list is not exhaustive: