Migrate browser code and tests to strict TypeScript

1 files changed, 8 insertions, 1 deletions

diff --git a/docs/POLICY.txt b/docs/POLICY.txt
index 16d97c2..1f54398 100644
--- a/docs/POLICY.txt
+++ b/docs/POLICY.txt
@@ -23,7 +23,9 @@ PROJECT CONVENTIONS
     file carries the AGPL copyright and permission header. LICENSE is the
     unmodified license text. Binary public keys and empty WKD policy files
     retain their protocol format. Generated Cargo.lock retains Cargo's own
-    metadata as well as the project notice.
+    metadata as well as the project notice. JSON npm manifests carry the legal
+    notice in a top-level // metadata field; compiler JSONC files use the usual
+    header syntax. Keep generated JavaScript legal markers when compiling.
 
     Do not add explanatory source comments. Express intent through structure
     and names. Legal headers are the required exception. Use .txt for prose
@@ -58,6 +60,11 @@ STRICTNESS
     The dependency allowlist retains the requested permissive licenses and
     Zlib; an unused allowance may produce an informational audit warning.
 
+    Browser logic and automation use strict TypeScript configurations with
+    separate browser/worker/Node environments and checked untrusted responses.
+    npm dependencies are exact, development-only, integrity-locked, and installed
+    with lifecycle scripts disabled. See TYPESCRIPT.txt for the build contract.
+
     Human license names follow https://www.gnu.org/licenses/license-list.html.
     In particular, display Expat License for SPDX MIT. Do not alter original
     copyright notices, legal texts, crate metadata, or machine SPDX identifiers.