# Non-stdlib dependency allowlist. One module path per line; # starts a comment.
# Adding a line requires an ADR in docs/decisions.md. Stdlib first, always.
# Only direct requirements are checked here; the total module count is capped by DEPS_MAX.
# Infrastructure clients (Redis, S3, search) are dependencies like any other and get no exemption.

github.com/yuin/goldmark
golang.org/x/text          # NFC normalisation (ADR-0015); collation later if earned
gopkg.in/yaml.v3           # frontmatter + site declaration (ADR-0020)