the anonymous one.

- **Listing composes the predicate.** The modules that compose `readable_by/2`

  are `OpenAgents.Repositories`, `OpenAgents.Issues`, `OpenAgents.Projects`,

  `OpenAgents.Notifications`, `OpenAgents.DataRights.AccountExport`, and

  `OpenAgents.Forge.Anchor` — six, not the four the amendment above named. The

  last is the published WAL anchor (`EXIT-005`), which is anonymous and must

  name exactly the repositories an anonymous reader already reaches.

  `OpenAgents.Notifications`, `OpenAgents.DataRights.AccountExport`,

  `OpenAgents.Forge.Anchor`, and `OpenAgents.Plugins.ForgeSource` — seven, not

  the four the amendment above named. The last two are anonymous surfaces and

  must name exactly the repositories an anonymous reader already reaches: the

  published WAL anchor (`EXIT-005`), and the plugin registry index, where a

  private repository's manifest would disclose the repository the same way a

  published anchor would.

- **The predicate's terms live in one file, plus four stated exceptions.**

  Every site in `lib/` naming a repository's `visibility` or `lifecycle_state`

  against `"public"` or `"ready"` is classified, and the four that decide reach

          "task suites, posted by the bench harness. Aggregate measurement " <>

          "of the product, carrying no record an account authors."

    },

    %{

      family: :plugin,

      api?: true,

      status: :not_user_data,

      mechanism: nil,

      proof: nil,

      issue: nil,

      note:

        "The plugin registry index: validated manifests discovered from forge " <>

          "repositories, each naming an artifact by digest. A manifest is a " <>

          "published description of code, not a record an account authors — " <>

          "what a person did with a plugin is their thread events, which " <>

          "export whole."

    },

    %{

      family: :capacity,

      api?: true,

  alias OpenAgents.Plugins.Index

  @doc "Return index entries for every public, ready repository that has a manifest.json on its default branch."

  @doc """

  Return index entries for every repository an anonymous reader can see that

  has a `manifest.json` on its default branch.

  The population composes `OpenAgents.Repositories.readable_by/2` with no user

  rather than restating the join (REPOSITORY-001). The registry is a public

  listing, so it must name exactly the repositories an anonymous reader

  already reaches — a private repository publishing a plugin manifest here

  would contradict TRANSPARENCY-001 the same way a published anchor would.

  """

  @spec entries() :: [Index.Entry.t()]

  def entries do

    OpenAgents.Repositories.Repository

    |> from(where: [visibility: "public", lifecycle_state: "ready"])

    |> OpenAgents.Repositories.readable_by(nil)

    |> OpenAgents.Repo.all()

    |> Enum.flat_map(&entries_for_repository/1)

  end

      "the pull requests, stacks, and issue dependencies an export may carry",

    OpenAgents.Forge.Anchor =>

      "the repositories the published WAL anchor names, which is an anonymous " <>

        "surface and must reach exactly what an anonymous reader already reaches"

        "surface and must reach exactly what an anonymous reader already reaches",

    OpenAgents.Plugins.ForgeSource =>

      "the repositories the plugin registry index draws manifests from, which " <>

        "is a public listing and must reach exactly what an anonymous reader " <>

        "already reaches"

  }

  # Every site in `lib/` that names the predicate's own terms — a repository's