# ───── Path A: single-team manifest snippet ───── # Paste inside your m.make_manifest { ... } block. Replace . registry_provides = m.make_registry_provides { participant = "", registries = m.make_registries_config { default = "primary", registries = [ m.make_registry_entry { id = "primary", endpoint = "", role = 'primary, tls = true, namespaces = { own = ["domains//", "modes//"], prefixes = ["domains//", "modes//"], }, credential_sops = "registry/ro.sops.yaml", # RO — pull/list credential_sops_rw = "registry/rw.sops.yaml", # RW — push }, ], }, },