Clarification for HEAD/GET behaviour for blobs across repos

[DenverJ]

Can I please get clarification on the expected behaviour for HEAD/GET requests for different repositories in a registry. IE given that /v2/repo-a/testimg/blobs/sha256:abc123 exists.

What is the expected behaviour/response for: HEAD /v2/repo-b/testimg/blobs/sha256:abc123 and GET /v2/repo-b/testimg/blobs/sha256:abc123

We are using an OCI conformant registry that is currently returning 200 for the HEAD and 404 for the GET.