bdeshi
c87fed697b
go get marks a module indirect until something imports it, and the allowlist check only inspects direct requires — so an unapproved dependency could sit in go.mod unnoticed. Demonstrated: adding github.com/google/uuid passed the allowlist check and was caught only by this gate.
khosra
A flat-file personal publishing engine in Go. Point the binary at a directory of Markdown and it becomes an owned, networked home for fiction, webcomics, art, and essays, in English and Bengali. The site's content lives in its own repository, not this one (ADR-0011).
If you are a human: start at HARNESS.md — what the scaffolding is, how to use it, and what to decide.
If you are an agent: start at CLAUDE.md — the constitution and the read order. It is loaded for you automatically; this file is not a prerequisite and nothing here is a rule.