{
  "registry_type": "oci",
  "verbs": ["push", "pull"],
  "resource_pattern": "tenant-alpha/*"
}