Platform Contracts
Dependencies
Every dependency confirmed, added one page at a time. The allowlist is the source of truth.
Dependencies contract
Every dependency is confirmed and added one page at a time; the allowlist governance/allowed-deps.json is the source of truth. Never bulk-copied from writing-system. Enforced by governance/scripts/check-deps.mjs (npm) and governance/scripts/check-python-deps.py (Python), run save-hook → pre-commit → CI.
Allowed today
shared
tooling