IMHO the RegRep should allow 'the component to into the repository' and
the registry should contain the derived metadata.
Assuming that, the RegRep interface will allow the 'user' (human or their
agent) to exploit both the metadata (at all levels of granularity) and the
artifact (as-in its original form).