Developer reference
Technical details
Profile validation
Registry admission checks package profile, publisher, immutable release identity, dependencies and terms. SHACL constrains declared RDF metadata; App, Data Product and other Use Case profiles specialize a common package model.
A valid catalogue entry can still require consumer-specific access agreements, paid dependencies or configuration before invocation. Admission is not execution certification.
Composition and adoption
Inclusion edges define reachable registry descriptions. Consumers resolve a pinned release into their branch workflow, then apply local validation and review. Catalogue operators govern admitted descriptions; they acquire neither mutation rights over consumer workspaces nor authority to install upstream updates silently. Publisher lineage and destination commit identity remain independently inspectable.