# ───── Path A: single-team manifest snippet ─────
# Paste inside your m.make_manifest { ... } block. Replace <placeholders>.

  registry_provides = m.make_registry_provides {
    participant = "<your-slug>",
    registries  = m.make_registries_config {
      default    = "primary",
      registries = [
        m.make_registry_entry {
          id                 = "primary",
          endpoint           = "<your-zot-host>",
          role               = 'primary,
          tls                = true,
          namespaces = {
            own      = ["domains/<your-slug>/", "modes/<your-slug>/"],
            prefixes = ["domains/<your-slug>/", "modes/<your-slug>/"],
          },
          credential_sops    = "registry/ro.sops.yaml",   # RO — pull/list
          credential_sops_rw = "registry/rw.sops.yaml",   # RW — push
        },
      ],
    },
  },
