{
  "artifact": {
    "description": "OCI registry endpoint and namespace access policy. Tells a mode which registry to use and what namespaces it may read or write. Credentials arrive via secret-delivery.",
    "id": "registry-access",
    "layers": [
      {
        "description": "contract.ncl — RegistryAccessContext, NamespaceAccess, AccessMode",
        "media_type": "application/vnd.ontoref.domain.contract.v1",
        "required": true
      },
      {
        "description": "example.json — sample context for zot on libre-wuji",
        "media_type": "application/vnd.ontoref.domain.example.v1",
        "required": false
      }
    ],
    "media_type": "application/vnd.ontoref.domain.v1",
    "uses_registry": "primary",
    "version": "0.1.0"
  }
}