let oci = import "schemas/lib/integration/oci_artifact_format.ncl" in

{
  artifact = {
    media_type  = "application/vnd.ontoref.domain.v1",
    id          = "registry-access",
    version     = "0.1.0",
    description = "OCI registry endpoint and namespace access policy. Tells a mode which registry to use and what namespaces it may read or write. Credentials arrive via secret-delivery.",
    layers = [
      {
        media_type  = "application/vnd.ontoref.domain.contract.v1",
        description = "contract.ncl — RegistryAccessContext, NamespaceAccess, AccessMode",
        required    = true,
      },
      {
        media_type  = "application/vnd.ontoref.domain.example.v1",
        description = "example.json — sample context for zot on libre-wuji",
        required    = false,
      },
    ],
    uses_registry = "primary",
  } | oci.DomainArtifact,
}