The publisher-signed, immutable record of a registry entry: what it is, what it requires, and what it guarantees. It is the authoritative basis for both discovery matching and verification; any change produces a new versioned, re-signed manifest.