1 files changed, 35 insertions, 0 deletions
diff --git a/scripts/boundary-allowlist.ts b/scripts/boundary-allowlist.ts
index be6816f..bb34139 100644
--- a/scripts/boundary-allowlist.ts
+++ b/scripts/boundary-allowlist.ts
@@ -13,4 +13,39 @@ export const ALLOWLIST: ReadonlyArray<Exemption> = [
     reason:
       "sharp is an optional dependency resolved by a dynamic import, so its shape is unknown at compile time; the cast only claims an optional .default and every value read off it is re-checked with typeof before use",
   },
+  {
+    path: "src/util/sharp-shim.ts",
+    rule: "named-cast",
+    count: 1,
+    reason:
+      "the same optional-dependency boundary: candidate is narrowed to a callable by a typeof check on the line above before it is claimed to be a SharpFactory",
+  },
+  {
+    path: "src/cdp/commands.ts",
+    rule: "named-cast",
+    count: 1,
+    reason:
+      "the sanctioned CDP result decoder; guarded by the validate.Check on the preceding line, and unavoidable because a generic key cannot correlate with its mapped value type",
+  },
+  {
+    path: "src/cdp/events.ts",
+    rule: "named-cast",
+    count: 1,
+    reason:
+      "the sanctioned CDP event decoder; same guarded Check and same generic-correlation limit as cdp/commands.ts",
+  },
+  {
+    path: "src/util/tool.ts",
+    rule: "function-cast",
+    count: 1,
+    reason:
+      "renderCall is stored under a per-tool Static<S> but invoked through the erased TSchema form; the generic-correlation limit makes this unavoidable and the value is the tool's own handler, created with the same S",
+  },
+  {
+    path: "src/domains/js.ts",
+    rule: "trailing-cast",
+    count: 1,
+    reason:
+      "the AsyncFunction constructor is reached through Object.getPrototypeOf, which returns any; the cast restores the constructor signature that a plain unknown would lose",
+  },
 ];