Forbid Rust lints and enforce strict typed TypeScript linting

1 files changed, 11 insertions, 7 deletions

diff --git a/docs/POLICY.txt b/docs/POLICY.txt
index 1f54398..4c6c6d3 100644
--- a/docs/POLICY.txt
+++ b/docs/POLICY.txt
@@ -45,12 +45,14 @@ PROJECT CONVENTIONS
 
 STRICTNESS
 
-    Preserve the requested Rust and Clippy deny groups, including pedantic
-    and nursery. The one additional exception is redundant_pub_crate: its
-    advice to make internal binary items public conflicts with unreachable_pub,
-    which remains denied. Internal interfaces remain explicitly crate-private.
-    No unsafe code, unwrap, expect, todo, debug output, arithmetic shortcuts,
-    or broad warning suppression is introduced.
+    All enabled Clippy groups and individual rules are forbidden, with no
+    blanket allow entries. Rust and Rustdoc checks use forbid wherever supported
+    by generated code. Three Rust settings remain deny for pinned Serde derives;
+    their unaffected members are independently forbidden. First-party lint
+    allowances are forbidden. See LINTING.txt for tested workarounds, generated
+    attribute evidence, and the narrow duplicate-dependency configuration.
+    Private app namespaces retain narrow internal visibility while both
+    redundant_pub_crate and unreachable_pub are enforced.
 
     cargo-deny rejects duplicate crate versions, wildcard requirements, unknown
     registries, unknown Git sources, and yanked versions. The chat prototype has
@@ -63,7 +65,9 @@ STRICTNESS
     Browser logic and automation use strict TypeScript configurations with
     separate browser/worker/Node environments and checked untrusted responses.
     npm dependencies are exact, development-only, integrity-locked, and installed
-    with lifecycle scripts disabled. See TYPESCRIPT.txt for the build contract.
+    with lifecycle scripts disabled. Typed ESLint forbids unsafe any/assertions,
+    unchecked promises, and suppression directives. Both supported compiler APIs
+    and npm advisories are checked. See TYPESCRIPT.txt and LINTING.txt.
 
     Human license names follow https://www.gnu.org/licenses/license-list.html.
     In particular, display Expat License for SPDX MIT. Do not alter original