ietf.oauth2_access_token

The version is immutable: the content at this address never changes.

The descriptor below is exactly the record the resolver puts into law.lock. Its shape is normative ($defs/LockedPackage of the lockfile schema), so publication status is expressed by the section of the catalogue rather than by a field inside it: an extra field would make the descriptor invalid.

{
  "contentHash": "sha256:36dcb282479aab0385519c65d5e388d559f3e94b078d3b1f7a3a0487f0dea435",
  "features": [
    "core-executable"
  ],
  "name": "ietf.oauth2_access_token",
  "namespace": "urn:ietf:clir:oauth2-access-token",
  "registryId": "law-dsl-dev",
  "resolverUri": "registry://law-dsl-dev/ietf.oauth2_access_token/0.1.0",
  "version": "0.1.0"
}

Signature

Not issued. The field schema exists (signature: algorithm, keyId, value); an issuer and keys do not: a signature attests the provenance of the bytes, not the legal correctness of the rules, and is a separate piece of work.