# Rivox Manifest & Lockfile Reference
Specification for `rivox.toml` and `rivox.lock`.
---
## `rivox.toml` (User Manifest)
```toml
[project]
name = "my-polyglot-monorepo"
version = "1.0.0"
[ecosystems.python]
path = "services/api"
tool = "uv"
[ecosystems.rust]
path = "services/core"
tool = "cargo"
[ecosystems.node]
path = "services/web"
tool = "pnpm"
[[cross_refs]]
consumer = "python:services/api"
dependency = "rust:services/core"
type = "native_extension"
```
## `rivox.lock` (Generated Manifest of Manifests)
```toml
version = 1
created_at = "2026-07-27T19:42:00Z"
[[ecosystem]]
name = "python"
tool = "uv"
tool_version = "0.4.15"
lockfile_path = "services/api/uv.lock"
lockfile_hash = "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
[provenance]
bundle_path = ".rivox/provenance.json"
signature_ref = "sigstore:rekor"
```
See also: [cli.md](cli.md), [build-system.md](build-system.md).