Publishers

Everyone publishing to the hub. The registry signs each publisher record; commercial artifacts carry their vendor’s licence key, verified at install.