the “how to tell official app claimed entry” is the part that needs figuring out.
I think you can kind of sidestep the question with this design. the intents.usage record in the user’s repo connects the intents.capability record in the app’s repo so no need to figure out “official” entry. Just follow links.
In my prototype I’m using bare dids in the usage record:
{
"app": "did:plc:ra4jsemddo2ii4pn5jaf6x4v", // did of @skyreader.app
}
but could also be at links directly to the capability record(s)