Versioned package & artifact registry. WASM modules, container images, signed by DID.
Immutable, content-addressed by SHA-256.
Publishers sign packages with their identity.
Modules, images, sidecars — same registry.
Mirror npm, pip, crates with caching for free.