One named surface buildDependencyGraph()'s scan actually covered -- the
application's own root, plus one entry per allow-listed packages (ADR
0014) name whose source was also scanned. See ADR 0036: a claim like
"no consumer found" is only ever as strong as what was actually
searched, and this is what lets a renderer say so explicitly instead of
implying an unbounded guarantee it can't back up.
One named surface
buildDependencyGraph()'s scan actually covered -- the application's own root, plus one entry per allow-listedpackages(ADR 0014) name whose source was also scanned. See ADR 0036: a claim like "no consumer found" is only ever as strong as what was actually searched, and this is what lets a renderer say so explicitly instead of implying an unbounded guarantee it can't back up.