Notes on architecting a third-party app catalog when the install surface is rendered inside someone else's iOS app, and the engineering tradeoffs that come with it.