docs(specs): add dependency-inventory design spec - #1

Merged

maybebyte merged 22 commits into

mainfrom

docs/dep-inventory-spec-review

Jun 26, 2026

Commits on Jun 26, 2026

docs(specs): add dependency inventory design draft
maybebyte
committed
e03d6ef
docs(specs): harden the deps-template inspection recipe
maybebyte
committed
8f2d6ab
docs(specs): correct the maintainer renovate.json rationale
maybebyte
committed
f1f83d7
docs(specs): make Renovate app enablement an explicit Goal 1 step
maybebyte
committed
f1c2a5d
docs(specs): cover every gated surface-map row in the generation tests
maybebyte
committed
6edb86a
docs(specs): stop the helper commands from adding untracked tool pins
maybebyte
committed
be3a03d
docs(specs): name every dependency surface in the surface-maps
maybebyte
committed
a9d080b
docs(specs): scope the evidence claims to what the research supports
maybebyte
committed
b56bb81
docs(specs): qualify the vcs_ref=HEAD render-equivalence claim
maybebyte
committed
5dee505
docs(specs): keep maintainer-only items out of the downstream changelog
maybebyte
committed
fcd7ee0
docs(specs): fix an inaccurate deliverable cross-reference
maybebyte
committed
64ca767
docs(specs): fix the deps-template interpreter-unset rationale
maybebyte
committed
9736e79
docs(specs): correct the literal "tag == HEAD" claim
maybebyte
committed
7ba9c7d
docs(specs): note the maintainer already runs zizmor
maybebyte
committed
8d85d4b
docs(specs): distinguish the silent uv desync from the CI-breaking one
maybebyte
committed
719b728
docs(specs): gate the uv_build floor on project_type=library
maybebyte
committed
57d03fa
docs(specs): tighten the toggle-off generation-test anchors
maybebyte
committed
3f793ef
docs(specs): correct the maintainer mise-tool accounting
maybebyte
committed
cebdc29
docs(specs): qualify the gitleaks mise-tracking claim
maybebyte
committed
d2c1dca
docs(specs): pin uvx copier in deps-template
maybebyte
committed
800311a
docs(specs): flag that the maintainer renovate.json has no CI gate
maybebyte
committed
94cb673
docs(specs): name zizmor's ref-version-mismatch audit in the caveat
maybebyte
committed
88c6012

Navigation Menu

docs(specs): add dependency-inventory design spec - #1

docs(specs): add dependency-inventory design spec#1
maybebyte merged 22 commits into
mainfrom
docs/dep-inventory-spec-review

Commits on Jun 26, 2026

docs(specs): add dependency inventory design draft

docs(specs): harden the deps-template inspection recipe

docs(specs): correct the maintainer renovate.json rationale

docs(specs): make Renovate app enablement an explicit Goal 1 step

docs(specs): cover every gated surface-map row in the generation tests

docs(specs): stop the helper commands from adding untracked tool pins

docs(specs): name every dependency surface in the surface-maps

docs(specs): scope the evidence claims to what the research supports

docs(specs): qualify the vcs_ref=HEAD render-equivalence claim

docs(specs): keep maintainer-only items out of the downstream changelog

docs(specs): fix an inaccurate deliverable cross-reference

docs(specs): fix the deps-template interpreter-unset rationale

docs(specs): correct the literal "tag == HEAD" claim

docs(specs): note the maintainer already runs zizmor

docs(specs): distinguish the silent uv desync from the CI-breaking one

docs(specs): gate the uv_build floor on project_type=library

docs(specs): tighten the toggle-off generation-test anchors

docs(specs): correct the maintainer mise-tool accounting

docs(specs): qualify the gitleaks mise-tracking claim

docs(specs): pin uvx copier in deps-template

docs(specs): flag that the maintainer renovate.json has no CI gate

docs(specs): name zizmor's ref-version-mismatch audit in the caveat