internal/

Package controlpacks installs, manages, and enumerates Concord control packs distributed as OCI artifacts.

Package framework resolves Concord framework manifests into a concrete install plan: the union of control packs and plugins that satisfy a workspace's declared compliance frameworks, pinned at exact versions.

Package lockfile reads and writes concord.lock, the per-workspace record of every pinned plugin, control pack, and framework artifact.

Package ociart pulls and verifies generic OCI artifacts — plugin binaries, control-pack tarballs, framework manifests — from any registry that speaks the distribution spec.

Package plugins is the host-side machinery that spawns Concord plugin binaries and exposes them as evidence.Collector implementations.