Matt
3147923d91
Three audit-flagged deps rejected on inspection (not parked-pending- decision): - @upstash/ratelimit — audit said "4 hand-rolled rate limiters"; actual state is one centralized sliding-window limiter with 14 named policies. - @faker-js/faker — both seed files are hand-curated specs keyed to test selectors, not random fake data; faker would mean ADDING a factory. - msw — vi.mock at the service-module boundary already gives determinism; msw only helps when tests hit fetch() directly. Adds tsc-staged.mjs to the done list. Updates parked list with concrete rationale per item. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>