deny.toml

# cargo-deny: bans, licences, advisories and sources.
#
# The workspace is deliberately small. Every dependency below is one this
# kernel could not reasonably implement itself, and each is named here so a new
# transitive arrival is a review, not a surprise.

[advisories]
version = 2
yanked = "deny"

[licenses]
version = 2
# Permissive only. The binary is AGPL-3.0-or-later; a copyleft dependency would
# be fine for us and hostile to anyone vendoring the kernel, so it is refused
# here rather than discovered downstream.
allow = [
    # Ours. cargo-deny evaluates the workspace's own crates alongside their
    # dependencies, so the project licence belongs in this list too.
    "AGPL-3.0-or-later",
    "Apache-2.0",
    "MIT",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "ISC",
    "Unicode-3.0",
    "Zlib",
]
confidence-threshold = 0.93
# An allowance no crate currently matches is a curated intent, not a defect.
# Failing on one would make removing a dependency break the build.
unused-allowed-license = "allow"

# Windows handle operations used by cap-primitives; keep this allowance scoped
# to the reviewed release instead of allowing the exception across the graph.
[[licenses.exceptions]]
name = "winx"
version = "=0.36.4"
allow = ["Apache-2.0 WITH LLVM-exception"]

[bans]
multiple-versions = "warn"
wildcards = "deny"

# Every crate this workspace resolves, named. Anything else fails the build.
#
# An **allowlist**, not a list of forbidden networking crates, and the direction
# is the point: a denylist catches only the ones somebody thought of, while this
# fails on *any* new dependency until a person adds it -- which is the moment to
# ask what it does. The capability-based filesystem layer also resolves OS
# handle bindings and address types through cap-primitives. Provider code uses
# its filesystem APIs; dependency names alone do not prove network behavior.
#
# Workspace members are listed too. An earlier version of this comment said
# cargo-deny scopes `allow` to external crates; it does not, and
# `cargo deny check bans` said so in ten lines. The tool was right and the note
# was a claim nobody had measured.
#
# A rendered public tree carries this file and builds one harness crate rather
# than seven, so six entries there match nothing. Deliberate: one file, rendered
# verbatim, and an entry matching nothing costs nothing.
#
# Adding a dependency is a two-line change and a decision. Removing this list to
# make a build pass is not a shortcut -- it is the guard.
allow = [
    { crate = "antigravity-setup-system" },
    { crate = "claude-setup-system" },
    { crate = "codex-setup-system" },
    { crate = "cursor-setup-system" },
    { crate = "grok-setup-system" },
    { crate = "harness-runtime" },
    { crate = "opencode-setup-system" },
    { crate = "pi-setup-system" },
    { crate = "provider-v3" },
    { crate = "setup-core" },
    { crate = "adler2" },
    { crate = "block-buffer" },
    { crate = "cfg-if" },
    { crate = "const-oid" },
    { crate = "cpufeatures" },
    { crate = "crypto-common" },
    { crate = "digest" },
    { crate = "equivalent" },
    { crate = "hashbrown" },
    { crate = "hybrid-array" },
    { crate = "indexmap" },
    { crate = "itoa" },
    { crate = "libc" },
    { crate = "memchr" },
    { crate = "miniz_oxide" },
    { crate = "proc-macro2" },
    { crate = "quote" },
    { crate = "serde" },
    { crate = "serde_core" },
    { crate = "serde_derive" },
    { crate = "serde_json" },
    { crate = "sha2" },
    { crate = "syn" },
    { crate = "typenum" },
    { crate = "unicode-ident" },
    { crate = "zmij" },
    # setup-core's directory-relative I/O closure. Remove with cap-std/cap-fs-ext.
    { crate = "ambient-authority" },
    { crate = "bitflags" },
    { crate = "cap-fs-ext" },
    { crate = "cap-primitives" },
    { crate = "cap-std" },
    { crate = "errno" },
    { crate = "fs-set-times" },
    { crate = "io-extras" },
    { crate = "io-lifetimes" },
    { crate = "ipnet" },
    { crate = "linux-raw-sys" },
    { crate = "maybe-owned" },
    { crate = "once_cell" },
    { crate = "rustix" },
    { crate = "rustix-linux-procfs" },
    { crate = "windows-link" },
    { crate = "windows-sys" },
    { crate = "windows-targets" },
    { crate = "windows_aarch64_gnullvm" },
    { crate = "windows_aarch64_msvc" },
    { crate = "windows_i686_gnu" },
    { crate = "windows_i686_gnullvm" },
    { crate = "windows_i686_msvc" },
    { crate = "windows_x86_64_gnu" },
    { crate = "windows_x86_64_gnullvm" },
    { crate = "windows_x86_64_msvc" },
    { crate = "winx" },
    # Forward configuration preserves JSONC/TOML syntax while updating owned
    # keys. Remove this parser closure with that surface or its shared replacement.
    { crate = "jsonc-parser@0.34.0" },
    { crate = "toml_datetime" },
    { crate = "toml_edit@0.25.16" },
    { crate = "toml_parser" },
    { crate = "toml_writer" },
    { crate = "winnow" },
    # setup-core's Windows no-replace publication; remove with that adapter.
    { crate = "winsafe@0.0.29" },
    # setup-core software records: SQLite, its VFS bridge and build/target closure.
    # Remove or re-review with rusqlite/sqlite-plugin; no networking API is used.
    { crate = "aho-corasick" },
    { crate = "bindgen" },
    { crate = "bumpalo" },
    { crate = "cc" },
    { crate = "cexpr" },
    { crate = "clang-sys" },
    { crate = "either" },
    { crate = "fallible-iterator" },
    { crate = "fallible-streaming-iterator" },
    { crate = "find-msvc-tools" },
    { crate = "foldhash" },
    { crate = "glob" },
    { crate = "hashlink" },
    { crate = "itertools" },
    { crate = "js-sys" },
    { crate = "libsqlite3-sys" },
    { crate = "minimal-lexical" },
    { crate = "nom" },
    { crate = "pkg-config" },
    { crate = "regex" },
    { crate = "regex-automata" },
    { crate = "regex-syntax" },
    { crate = "rsqlite-vfs" },
    { crate = "rusqlite" },
    { crate = "rustc-hash" },
    { crate = "rustversion" },
    { crate = "shlex" },
    { crate = "smallvec" },
    { crate = "sqlite-plugin" },
    { crate = "sqlite-wasm-rs" },
    { crate = "thiserror" },
    { crate = "thiserror-impl" },
    { crate = "vcpkg" },
    { crate = "wasm-bindgen" },
    { crate = "wasm-bindgen-macro" },
    { crate = "wasm-bindgen-macro-support" },
    { crate = "wasm-bindgen-shared" },
]

[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]