let oci = import "schemas/lib/integration/oci_artifact_format.ncl" in

# Pinned versions + digests of the domains this mode consumes. Auto-populated
# by `prvng integration subscribe`; producer hand-writes the initial version
# matching the contracts.ncl set referenced in provisioning.ncl::domains_used.

{
  schema_version = "0.1.0",
  domains = {
    "secret-delivery" = {
      version    = "0.1.0",
      digest     = "sha256:<populate-after-publish>",
      pulled_at  = "<set-on-pull>",
      media_type = "application/vnd.ontoref.domain.v1",
    } | oci.DomainLockEntry,
    # Add one entry per domain in provisioning.ncl::domains_used.
  },
} | oci.DomainLock