> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tensor9.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Artifact Registry
> Operations, limits and service levels for Artifact Registry adapters with Google Cloud origin APIs.
These terms describe the origin API served by the adapter, not direct calls to the target service. Management-request latency covers accepting and handling the API call; it does not promise that a cloud resource finishes provisioning within that time.
## Service level agreements
These tables show Tensor9's standard service levels and adapters whose standard terms are still being defined. Your signed agreement determines the SLAs, covered adapters and operations, limits, remedies and support terms that apply to your deployment.
Listed terms cover requests sent through this service adapter. They do not cover direct connections to the target service or replace the cloud provider's own SLA. Each origin-to-target pair has its own terms or an explicit pending status.
See the [SLA tables](/byoc/support/service-adapter-slas), [measurement rules](/byoc/support/service-levels), and [scaling conditions](/byoc/support/scaling-and-limits).
### Artifact Registry to ECR (Elastic Container Registry)
| SLA | Service level | What is covered | Conditions |
| ----------------------------------- | ----------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Bounded container manifest requests | 5 ms monthly p99 | `google::1.0.0::artifact-registry`: `GET /v2/{name}/manifests/{reference}`, `HEAD /v2/{name}/manifests/{reference}`, `PUT /v2/{name}/manifests/{reference}` | One manifest of at most 64 KiB and at most 100 layer descriptors. Layer-byte transfer and complete image push/pull need separately agreed byte-rate limits. |
| Repository administration | 20 ms monthly p99 | `google::1.0.0::artifact-registry`: `artifactregistry.projects.locations.repositories.create`, `artifactregistry.projects.locations.repositories.delete` | One configuration object, at most 50 entries and 32 KiB request/response data. A list is one page of at most 100 records and 256 KiB, not a paginator traversing the whole account. |
| Correct request handling | 99.9% per calendar month | `google::1.0.0::artifact-registry`: `GET /v2/{name}/manifests/{reference}`, `HEAD /v2/{name}/manifests/{reference}`, `PUT /v2/{name}/manifests/{reference}`, `artifactregistry.projects.locations.repositories.create`, `artifactregistry.projects.locations.repositories.delete` | The request uses an operation and request shape that this adapter profile lists as available, and stays within the limits in the service page and your signed agreement. A target-service failure does not count as an adapter failure when Tensor9 correctly returns that failure to the caller. |
| Documented adapter behavior | Preserve the supported behavior documented for this adapter | `google::1.0.0::artifact-registry`: `GET /v2/{name}/manifests/{reference}`, `HEAD /v2/{name}/manifests/{reference}`, `PUT /v2/{name}/manifests/{reference}`, `artifactregistry.projects.locations.repositories.create`, `artifactregistry.projects.locations.repositories.delete` | Preserve content digests, manifest references and supported access scope. A successful push must not point to missing layers or a different repository. Native naming, immutable-tag, token and retention limits remain those in the target profile. Scanning completion and findings are separate from request handling, and unsupported registry tasks or non-container formats do not gain coverage here. |
| Endpoint reachability | 99.9% per calendar month | Adapter endpoint reachability | The agreed production deployment has healthy target connectivity and receives a valid adapter health probe. This measures the adapter endpoint, not the target provider's service. |
| Adapter autoscaling and limits | Automatic scaling within the workload and deployment limits in your agreement | Adapter behavior across requests | Your agreement states the maximum request rate, burst size, request and response sizes, concurrency, and target calls per request. Tensor9 maintains adapter capacity inside that envelope. Target-service quotas and capacity are separate. |
**Deployment availability.** These targets describe this adapter design. Confirm that your deployment supports the listed operations; a numerical target does not establish runtime availability.
**What Tensor9 covers.** These service levels cover the adapter between the origin API and target API. They do not replace the target provider's SLA.
**How latency is counted.** Adapter work, including metadata and coordination, counts. Only separately measured permitted target waits are excluded.
**Which terms apply.** Your signed agreement names the covered operations, workload limits, remedies, and final service levels for your deployment.
#### What this adapter does
For `aws::1.0.0::ecr`, container image requests use the registry distribution protocol while repository administration uses the origin cloud's management API. Image names, authentication scopes and target repository behavior must remain coordinated. The manifest budget does not time a multi-gigabyte image transfer, and a configured vulnerability scanner does not imply a fixed scan-completion deadline. These targets describe this adapter design; confirm that your deployment supports the listed operations. A numerical target does not establish runtime availability.
#### How the latency targets were chosen
**Bounded container manifest requests: 5 ms monthly p99.** `GET /v2/{name}/manifests/{reference}`, `HEAD /v2/{name}/manifests/{reference}`, `PUT /v2/{name}/manifests/{reference}`. Translate repository identity, authentication scope and manifest metadata without buffering arbitrary layer bodies.
**Repository administration: 20 ms monthly p99.** `artifactregistry.projects.locations.repositories.create`, `artifactregistry.projects.locations.repositories.delete`. Bounded configuration validation, durable adapter metadata and response encoding; native provisioning completion and propagation are separate.
Your signed agreement sets the terms for your deployment. A target does not add an operation or option that the compatibility tables mark unavailable.
#### What counts toward latency
For a request-response row, measure from the agreed ingress boundary to dispatch of the complete response. A row that explicitly names a first response chunk ends at that chunk; its number does not cover the rest of the stream. A long-poll row names the intentional wait and when adapter delay starts. Include parsing, authorization, admission, translation, serialization, adapter-owned storage and coordination, retries and response handling. Subtract only separately measured target-workload waits and external network segments allowed by the measurement rules. The adapter's own response handling and dispatch remain covered. A database used for adapter metadata is still adapter work, even if a cloud provider hosts it.
For concurrent calls, exclude the union of permitted wait intervals, not the sum of overlapping spans. Calculate each request's adapter duration first, then the monthly p99. Do not subtract one service's p99 from another's. Known adapter timeouts are over-budget samples; failed or incomplete requests cannot disappear to improve the percentile. Missing measurements do not become zero latency. An SDK call span alone does not prove how much of its duration can be excluded.
#### Availability and failures
The 99.9% request target measures correct adapter handling, not the percentage of application calls that return success. Correctly forwarding a target quota or permission error is different from producing that error because the adapter sent the wrong request. Adapter-caused failures count even when the target is healthy.
With 1,000,000 eligible calls in a month, a 99.9% target permits at most 1,000 adapter-attributable failures. Endpoint probes have their own denominator. Correctness defects remain actionable even when the monthly availability percentage is met.
#### Scaling and target-service capacity
Measure active uploads/downloads and layer bytes alongside manifest requests and authentication work. Shared layers and simultaneous deployment pulls can create large bandwidth bursts with few management calls. Tensor9 scales adapter capacity within agreed byte, stream and manifest limits; the customer monitors target registry bandwidth, retention and quotas. Repository creation and image transfer have different bottlenecks.
Tell Tensor9 the expected steady rate, bursts, concurrency, payload sizes and operation mix. Tensor9 sizes and scales the adapter for the agreed load; you choose and monitor the target service's capacity with Tensor9's help. A latency budget is not a requests-per-second rating. Larger requests and higher rates need explicit terms, not silent inheritance of a small-request SLA.
#### Data and behavior guarantees
Preserve content digests, manifest references and supported access scope. A successful push must not point to missing layers or a different repository. Native naming, immutable-tag, token and retention limits remain those in the target profile. Scanning completion and findings are separate from request handling, and unsupported registry tasks or non-container formats do not gain coverage here.
#### Example and diagnosis
Push a 20 KiB manifest for `orders-api:v2`, then pull it by digest. The manifest calls fit this row; transferring its 600 MiB of layers does not fit a 5 ms request class. Diagnose slow pulls using layer bandwidth and target throttling separately from manifest/authentication timing.
Use `tensor9 explain` and the documented explain headers to understand the selected adapter and its behavior. Correlate available request diagnostics with the target provider's latency, throttling and capacity metrics. An explain report helps diagnose a request; it is not by itself a qualified SLA timing measurement. Share the operation, request shape, timestamps and request identifiers with support, with credentials and customer payloads removed.
### Artifact Registry to Container Registry (ACR)
| SLA | Service level | What is covered | Conditions |
| ----------------------------------- | ----------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Bounded container manifest requests | 5 ms monthly p99 | `google::1.0.0::artifact-registry`: `GET /v2/{name}/manifests/{reference}`, `HEAD /v2/{name}/manifests/{reference}`, `PUT /v2/{name}/manifests/{reference}` | One manifest of at most 64 KiB and at most 100 layer descriptors. Layer-byte transfer and complete image push/pull need separately agreed byte-rate limits. |
| Repository administration | 20 ms monthly p99 | `google::1.0.0::artifact-registry`: `artifactregistry.projects.locations.repositories.create`, `artifactregistry.projects.locations.repositories.delete` | One configuration object, at most 50 entries and 32 KiB request/response data. A list is one page of at most 100 records and 256 KiB, not a paginator traversing the whole account. |
| Correct request handling | 99.9% per calendar month | `google::1.0.0::artifact-registry`: `GET /v2/{name}/manifests/{reference}`, `HEAD /v2/{name}/manifests/{reference}`, `PUT /v2/{name}/manifests/{reference}`, `artifactregistry.projects.locations.repositories.create`, `artifactregistry.projects.locations.repositories.delete` | The request uses an operation and request shape that this adapter profile lists as available, and stays within the limits in the service page and your signed agreement. A target-service failure does not count as an adapter failure when Tensor9 correctly returns that failure to the caller. |
| Documented adapter behavior | Preserve the supported behavior documented for this adapter | `google::1.0.0::artifact-registry`: `GET /v2/{name}/manifests/{reference}`, `HEAD /v2/{name}/manifests/{reference}`, `PUT /v2/{name}/manifests/{reference}`, `artifactregistry.projects.locations.repositories.create`, `artifactregistry.projects.locations.repositories.delete` | Preserve content digests, manifest references and supported access scope. A successful push must not point to missing layers or a different repository. Native naming, immutable-tag, token and retention limits remain those in the target profile. Scanning completion and findings are separate from request handling, and unsupported registry tasks or non-container formats do not gain coverage here. |
| Endpoint reachability | 99.9% per calendar month | Adapter endpoint reachability | The agreed production deployment has healthy target connectivity and receives a valid adapter health probe. This measures the adapter endpoint, not the target provider's service. |
| Adapter autoscaling and limits | Automatic scaling within the workload and deployment limits in your agreement | Adapter behavior across requests | Your agreement states the maximum request rate, burst size, request and response sizes, concurrency, and target calls per request. Tensor9 maintains adapter capacity inside that envelope. Target-service quotas and capacity are separate. |
**Deployment availability.** These targets describe this adapter design. Confirm that your deployment supports the listed operations; a numerical target does not establish runtime availability.
**What Tensor9 covers.** These service levels cover the adapter between the origin API and target API. They do not replace the target provider's SLA.
**How latency is counted.** Adapter work, including metadata and coordination, counts. Only separately measured permitted target waits are excluded.
**Which terms apply.** Your signed agreement names the covered operations, workload limits, remedies, and final service levels for your deployment.
#### What this adapter does
For `azure::1.0.0::container-registry`, container image requests use the registry distribution protocol while repository administration uses the origin cloud's management API. Image names, authentication scopes and target repository behavior must remain coordinated. The manifest budget does not time a multi-gigabyte image transfer, and a configured vulnerability scanner does not imply a fixed scan-completion deadline. These targets describe this adapter design; confirm that your deployment supports the listed operations. A numerical target does not establish runtime availability.
#### How the latency targets were chosen
**Bounded container manifest requests: 5 ms monthly p99.** `GET /v2/{name}/manifests/{reference}`, `HEAD /v2/{name}/manifests/{reference}`, `PUT /v2/{name}/manifests/{reference}`. Translate repository identity, authentication scope and manifest metadata without buffering arbitrary layer bodies.
**Repository administration: 20 ms monthly p99.** `artifactregistry.projects.locations.repositories.create`, `artifactregistry.projects.locations.repositories.delete`. Bounded configuration validation, durable adapter metadata and response encoding; native provisioning completion and propagation are separate.
Your signed agreement sets the terms for your deployment. A target does not add an operation or option that the compatibility tables mark unavailable.
#### What counts toward latency
For a request-response row, measure from the agreed ingress boundary to dispatch of the complete response. A row that explicitly names a first response chunk ends at that chunk; its number does not cover the rest of the stream. A long-poll row names the intentional wait and when adapter delay starts. Include parsing, authorization, admission, translation, serialization, adapter-owned storage and coordination, retries and response handling. Subtract only separately measured target-workload waits and external network segments allowed by the measurement rules. The adapter's own response handling and dispatch remain covered. A database used for adapter metadata is still adapter work, even if a cloud provider hosts it.
For concurrent calls, exclude the union of permitted wait intervals, not the sum of overlapping spans. Calculate each request's adapter duration first, then the monthly p99. Do not subtract one service's p99 from another's. Known adapter timeouts are over-budget samples; failed or incomplete requests cannot disappear to improve the percentile. Missing measurements do not become zero latency. An SDK call span alone does not prove how much of its duration can be excluded.
#### Availability and failures
The 99.9% request target measures correct adapter handling, not the percentage of application calls that return success. Correctly forwarding a target quota or permission error is different from producing that error because the adapter sent the wrong request. Adapter-caused failures count even when the target is healthy.
With 1,000,000 eligible calls in a month, a 99.9% target permits at most 1,000 adapter-attributable failures. Endpoint probes have their own denominator. Correctness defects remain actionable even when the monthly availability percentage is met.
#### Scaling and target-service capacity
Measure active uploads/downloads and layer bytes alongside manifest requests and authentication work. Shared layers and simultaneous deployment pulls can create large bandwidth bursts with few management calls. Tensor9 scales adapter capacity within agreed byte, stream and manifest limits; the customer monitors target registry bandwidth, retention and quotas. Repository creation and image transfer have different bottlenecks.
Tell Tensor9 the expected steady rate, bursts, concurrency, payload sizes and operation mix. Tensor9 sizes and scales the adapter for the agreed load; you choose and monitor the target service's capacity with Tensor9's help. A latency budget is not a requests-per-second rating. Larger requests and higher rates need explicit terms, not silent inheritance of a small-request SLA.
#### Data and behavior guarantees
Preserve content digests, manifest references and supported access scope. A successful push must not point to missing layers or a different repository. Native naming, immutable-tag, token and retention limits remain those in the target profile. Scanning completion and findings are separate from request handling, and unsupported registry tasks or non-container formats do not gain coverage here.
#### Example and diagnosis
Push a 20 KiB manifest for `orders-api:v2`, then pull it by digest. The manifest calls fit this row; transferring its 600 MiB of layers does not fit a 5 ms request class. Diagnose slow pulls using layer bandwidth and target throttling separately from manifest/authentication timing.
Use `tensor9 explain` and the documented explain headers to understand the selected adapter and its behavior. Correlate available request diagnostics with the target provider's latency, throttling and capacity metrics. An explain report helps diagnose a request; it is not by itself a qualified SLA timing measurement. Share the operation, request shape, timestamps and request identifiers with support, with credentials and customer payloads removed.
## Debug this service
For requests through a service adapter, use Explain and request diagnostics to investigate the selected mapping.
Follow the [BYOC service-adapter debugging runbook](/byoc/service-adapters/debugging/overview) to capture and interpret the diagnostic evidence.
[Service Catalog](/byoc/service-adapters/catalog).