{
  "$comment": "EXAMPLE aidlc.lock for an install that chose the test-pro plugin. Would be written by `aidlc plugin add test-pro` — the installer and lockfile writer are FUTURE WORK (doc 18 §8 Status); nothing reads or writes a lockfile today. Pins everything that determines the composed result, so a future `aidlc plugin sync` could reproduce a byte-identical install. The sha256 values below are ILLUSTRATIVE placeholders.",
  "lockfileVersion": 1,
  "harness": "claude",
  "composer": {
    "version": "2.1.0",
    "$comment": "the AIDLC composer that produced this install (doc 18 §8 Status — future work)"
  },
  "core": {
    "version": "2.0.8",
    "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
    "$comment": "bare-core version + content hash — the base every install starts from"
  },
  "plugins": {
    "test-pro": {
      "version": "0.1.0",
      "source": "github:awslabs/aidlc-plugin-test-pro",
      "resolved": "https://github.com/awslabs/aidlc-plugin-test-pro.git",
      "commit": "1111111111111111111111111111111111111111",
      "integrity": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
      "dependencies": ["core"],
      "$comment": "source git SHA + content hash of the fetched plugin tree"
    }
  },
  "result": {
    "integrity": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
    "$comment": "content hash of the composed effective install (core + test-pro). sync asserts the recomposed tree matches this."
  }
}