Implement voted Jerboa feature backlog

ober

e199f6def1cac3d3d975ce50eeafb67eb6c07b46

diff --git a/Makefile b/Makefile
index e4d1636..455ff9a 100644
--- a/Makefile
+++ b/Makefile
@@ -55,7 +55,7 @@ TYPED_LLVMIR_PARITY_FN ?= sample_typed_llvmir_smoke::main
 LLVM_BIN ?= $(shell if command -v llvm-as >/dev/null 2>&1; then dirname "$$(command -v llvm-as)"; elif [ -x /opt/homebrew/opt/llvm/bin/llvm-as ]; then echo /opt/homebrew/opt/llvm/bin; elif [ -x /usr/local/opt/llvm/bin/llvm-as ]; then echo /usr/local/opt/llvm/bin; fi)
 TYPED_WRAPPER_DIR ?= build/typed/jerboa
 
-.PHONY: help chez chez-cross build binary binary-typed binary-typed-smoke binary-cross native-cross pure-audit typecheck typed-rust typed-llvmir typed-llvmir-check typed-llvmir-smoke typed-llvmir-parity typed-wrappers typed-build typed-wrapper-smoke typed-split-tree-smoke typed-test typed-clean test test-reader test-core test-runtime test-stdlib test-ffi test-modules test-expanded test-contract test-ergo test-limits-primitives test-typed-core test-typed-parser test-typed-checker test-typed-rust test-typed-llvmir test-typed-wrappers test-pure-audit test-features test-wrappers test-phase4a test-phase4b test-phase4c test-phase4d test-phase4e test-phase4f test-phase5 test-phase5e test-phase6 test-phase7 test-phase8 test-functional test-repl test-security test-security-profile test-native test-gaps native clean-native audit-native clean security security-production security-profile fuzz fuzz-smoke fuzz-deep fuzz-reader-fuzz fuzz-json-fuzz fuzz-http2-fuzz fuzz-dns-fuzz fuzz-pregexp-fuzz fuzz-csv-fuzz fuzz-base64-fuzz fuzz-hex-fuzz fuzz-uri-fuzz fuzz-format-fuzz fuzz-router-fuzz fuzz-sandbox-fuzz test-rawstring test-regex test-rx test-peg test-regex-all check-docs check-docs-strict docker-build docker-push
+.PHONY: help chez chez-cross build binary binary-typed binary-typed-smoke binary-cross native-cross pure-audit typecheck typed-rust typed-llvmir typed-llvmir-check typed-llvmir-smoke typed-llvmir-parity typed-wrappers typed-build typed-wrapper-smoke typed-split-tree-smoke typed-test typed-clean test test-reader test-core test-runtime test-try-debug test-stdlib test-ffi test-modules test-expanded test-contract test-ergo test-limits-primitives test-typed-core test-typed-parser test-typed-checker test-typed-rust test-typed-llvmir test-typed-wrappers test-pure-audit test-features test-wrappers test-phase4a test-phase4b test-phase4c test-phase4d test-phase4e test-phase4f test-phase5 test-phase5e test-phase6 test-phase7 test-phase8 test-functional test-repl test-security test-security-profile test-native test-gaps native clean-native audit-native clean security security-production security-profile fuzz fuzz-smoke fuzz-deep fuzz-reader-fuzz fuzz-json-fuzz fuzz-http2-fuzz fuzz-dns-fuzz fuzz-pregexp-fuzz fuzz-csv-fuzz fuzz-base64-fuzz fuzz-hex-fuzz fuzz-uri-fuzz fuzz-format-fuzz fuzz-router-fuzz fuzz-sandbox-fuzz test-rawstring test-regex test-rx test-peg test-regex-all check-docs check-docs-strict docker-build docker-push
 
 help:
 	@echo "Usage: make <target>"
@@ -850,7 +850,7 @@ jlsp-freebsd-amd64: chez build lsp-gen
 # Host + the two cross targets.
 jlsp-portable: jlsp jlsp-linux-amd64 jlsp-freebsd-amd64
 
-test: test-reader test-core test-runtime test-stdlib test-ffi test-modules test-expanded test-regex-all test-contract test-ergo test-limits-primitives test-typed-parser test-typed-checker test-pure-audit test-nrepl-auth test-jpkg
+test: test-reader test-core test-runtime test-try-debug test-stdlib test-ffi test-modules test-expanded test-regex-all test-contract test-ergo test-limits-primitives test-typed-parser test-typed-checker test-pure-audit test-nrepl-auth test-jpkg
 
 # jpkg package manager: run every tests/test-jpkg*.ss
 .PHONY: test-jpkg
@@ -1040,6 +1040,9 @@ test-runtime:
 		$(SCHEME) --libdirs $(LIBDIRS) --script tests/test-runtime.ss; \
 	fi
 
+test-try-debug:
+	@$(SCHEME) --libdirs $(LIBDIRS) --script tests/test-try-debug.ss
+
 test-stdlib:
 	@if [ -f tests/test-stdlib.ss ]; then \
 		$(SCHEME) --libdirs $(LIBDIRS) --script tests/test-stdlib.ss; \
diff --git a/data/api-signatures.sexp b/data/api-signatures.sexp
index 26157ed..e31d4ea 100644
--- a/data/api-signatures.sexp
+++ b/data/api-signatures.sexp
@@ -1,4 +1,4 @@
-(("errors") ("generated" . "2026-06-03")
+(("errors") ("generated" . "2026-06-07")
   ("modules"
    ("(jerboa build musl)"
      ("exports" "build-musl-binary" "make-musl-cross-target"
@@ -419,18 +419,19 @@
      ("file" . "lib/jerboa/prelude/safe.ss")
      ("tier" . "core"))
    ("(jerboa prelude)"
-     ("exports" "*method-tables*" "*struct-types*" "->" "->>"
-      "->>?" "->?" "1+" "1-" ":" ":-" ":?" ":~" "<...>" "<>"
-      "ContractViolation" "Error" "acons" "add-watch!" "aget"
-      "agetq" "agetv" "aif" "alist" "alist->hash-table"
-      "alist->plist*" "alist?" "alists->csv" "and-then" "any"
-      "append-map" "append1" "arem" "arem!" "aremq" "aremq!"
-      "aremv" "aremv!" "as->" "aset" "aset!" "asetq" "asetq!"
-      "asetv" "asetv!" "assert!" "assoc-in" "assoc-in!" "atom"
-      "atom-deref" "atom-reset!" "atom-swap!" "atom-update!"
-      "atom?" "awhen" "begin-ffi" "bind-method!" "butlast"
-      "c-declare" "c-lambda" "call-method"
-      "call-with-list-builder" "capture" "catch" "chain"
+     ("exports" "*method-tables*" "*safe-mode*" "*struct-types*"
+      "*try-debug*" "->" "->>" "->>?" "->?" "1+" "1-" ":" ":-"
+      ":?" ":~" "<...>" "<>" "ContractViolation" "Error" "acons"
+      "add-watch!" "aget" "agetq" "agetv" "aif" "alist"
+      "alist->hash-table" "alist->plist*" "alist?" "alists->csv"
+      "and-then" "any" "append-map" "append1" "arem" "arem!"
+      "aremq" "aremq!" "aremv" "aremv!" "as->" "aset" "aset!"
+      "asetq" "asetq!" "asetv" "asetv!" "assert!" "assoc-in"
+      "assoc-in!" "atom" "atom-deref" "atom-reset!" "atom-swap!"
+      "atom-update!" "atom?" "awhen" "begin-ffi" "bind-method!"
+      "butlast" "c-declare" "c-lambda" "call-method"
+      "call-with-list-builder" "call-with-safe-input-file"
+      "call-with-safe-output-file" "capture" "catch" "chain"
       "chain-and" "comp" "compare-and-set!" "complement" "compose"
       "compose1" "cond->" "cond->>" "conjoin" "constantly"
       "contract-violation-message" "contract-violation-who"
@@ -486,12 +487,13 @@
       "map/car" "mapcat" "match" "match/strict" "maybe"
       "memo-proc" "meta" "meta-wrapped?" "negate"
       "nested-empty-like" "nested-get" "ok" "ok->list" "ok?"
-      "or-else" "parse-date" "parse-datetime" "parse-time"
-      "partial" "partition" "partition-all" "partition-by"
-      "path-absolute?" "path-directory" "path-expand"
-      "path-extension" "path-join" "path-normalize"
-      "path-strip-directory" "path-strip-extension" "pget" "pgetq"
-      "pgetv" "plist->alist*" "plist->hash-table" "pop!" "pp"
+      "open-safe-input-file" "open-safe-output-file" "or-else"
+      "parse-date" "parse-datetime" "parse-time" "partial"
+      "partition" "partition-all" "partition-by" "path-absolute?"
+      "path-directory" "path-expand" "path-extension" "path-join"
+      "path-normalize" "path-strip-directory"
+      "path-strip-extension" "pget" "pgetq" "pgetv"
+      "plist->alist*" "plist->hash-table" "pop!" "pp"
       "pp-to-string" "ppd" "ppd-to-string" "pprint" "prem" "prem!"
       "premq" "premq!" "premv" "premv!" "printf" "processor-count"
       "pset" "pset!" "psetq" "psetq!" "psetv" "psetv!" "push!"
@@ -510,15 +512,20 @@
       "sequence-results" "shared-cas!" "shared-ref" "shared-set!"
       "shared-swap!" "shared-update!" "shared?" "sleep-ms" "slice"
       "snoc" "some" "some->" "some->>" "some-fn" "sort" "sort!"
-      "split" "split-at" "split-with" "stable-sort" "stable-sort!"
-      "str" "string->json-object" "string->keyword"
-      "string-contains" "string-empty?" "string-find"
-      "string-find-all" "string-index" "string-join" "string-map"
-      "string-match?" "string-prefix?" "string-split"
+      "split" "split-at" "split-with" "sqlite-bind" "sqlite-close"
+      "sqlite-exec" "sqlite-execute" "sqlite-finalize"
+      "sqlite-open" "sqlite-prepare" "sqlite-query" "sqlite-step"
+      "stable-sort" "stable-sort!" "str" "string->json-object"
+      "string->keyword" "string-contains" "string-empty?"
+      "string-find" "string-find-all" "string-index" "string-join"
+      "string-map" "string-match?" "string-prefix?" "string-split"
       "string-suffix?" "string-trim" "strip-meta"
       "struct-field-ref" "struct-field-set!" "struct-predicate"
       "struct-type-info" "swap!" "take" "take-last" "take-until"
-      "take-while" "time->string" "try" "try-result" "try-result*"
+      "take-while" "tcp-accept" "tcp-close" "tcp-connect"
+      "tcp-listen" "tcp-read" "tcp-write" "tcp-write-string"
+      "time->string" "try" "try-debug-enabled?" "try-debug-log"
+      "try-or-false" "try-or-false*" "try-result" "try-result*"
       "unique" "until" "unwind-protect" "unwrap" "unwrap-err"
       "unwrap-or" "unwrap-or-else" "update-in" "update-in!"
       "using" "vary-meta" "vderef" "volatile!" "volatile?"
@@ -656,7 +663,9 @@
        "llvm-module-mangle" "llvm-symbol-name"
        "typed-library-form->llvmir-string"
        "typed-library-forms->llvmir-module"
-       "typed-module->llvmir-string")
+       "typed-library-forms->llvmir-string"
+       "typed-module->llvmir-string"
+       "typed-modules->llvmir-string")
      ("file" . "lib/jerboa/typed/llvmir.ss")
      ("tier" . "core"))
    ("(jerboa typed parser)"
@@ -4620,17 +4629,24 @@
      ("file" . "lib/std/os/landlock-native.ss")
      ("tier" . "stable"))
    ("(std os limits sandbox)"
-     ("exports" "make-sandbox-policy" "make-sandbox-result"
-      "sandbox-backend" "sandbox-capabilities"
-      "sandbox-child-preexec-available?"
+     ("exports" "egress-policy-default-action"
+      "egress-policy-host-allowed?" "egress-policy-host-decision"
+      "egress-policy-proxy-allowlist"
+      "egress-policy-require-full-isolation?"
+      "egress-policy-rules" "egress-policy?" "egress-rule-action"
+      "egress-rule-target" "egress-rule?" "make-egress-policy"
+      "make-egress-rule" "make-sandbox-policy"
+      "make-sandbox-result" "sandbox-backend"
+      "sandbox-capabilities" "sandbox-child-preexec-available?"
       "sandbox-child-preexec-needed?"
       "sandbox-command-wrapper-available?"
       "sandbox-command-wrapper-needed?" "sandbox-launch"
-      "sandbox-policy" "sandbox-policy-explain"
-      "sandbox-policy-get" "sandbox-policy-pairs"
-      "sandbox-policy-sbpl" "sandbox-policy-set!"
-      "sandbox-policy?" "sandbox-prepare-child!"
-      "sandbox-result-backend" "sandbox-result-launched?"
+      "sandbox-policy" "sandbox-policy-diagnostics"
+      "sandbox-policy-explain" "sandbox-policy-get"
+      "sandbox-policy-pairs" "sandbox-policy-sbpl"
+      "sandbox-policy-set!" "sandbox-policy?"
+      "sandbox-prepare-child!" "sandbox-result-backend"
+      "sandbox-result-diagnostics" "sandbox-result-launched?"
       "sandbox-result-limit-report" "sandbox-result-process"
       "sandbox-result-refused-axes" "sandbox-result-report"
       "sandbox-result-signal" "sandbox-result-status"
@@ -4921,6 +4937,226 @@
       "pipeline?" "stage-fn" "stage-name" "stage-result" "stage?")
      ("file" . "lib/std/pipeline.ss")
      ("tier" . "stable"))
+   ("(std pkg advisory)"
+     ("exports" "action-blocks-all?" "action-blocks-new?" "advisories-for"
+       "advisory-action" "advisory-action-rank" "advisory-affected"
+       "advisory-affects?" "advisory-aliases"
+       "advisory-fixed-versions" "advisory-id" "advisory-severity"
+       "advisory-summary" "advisory?" "load-advisories-from-dir"
+       "parse-advisory" "parse-advisory-file")
+     ("file" . "lib/std/pkg/advisory.ss")
+     ("tier" . "stable"))
+   ("(std pkg artifact)"
+     ("exports" "artifact-extract" "artifact-file-name"
+       "artifact-info-digest" "artifact-info-entries"
+       "artifact-info-manifest" "artifact-info-size"
+       "artifact-info?" "artifact-validate"
+       "jpkg-max-artifact-bytes" "pack-project")
+     ("file" . "lib/std/pkg/artifact.ss")
+     ("tier" . "stable"))
+   ("(std pkg audit)"
+     ("exports" "audit-project" "audit-report-blocking?"
+       "audit-report-findings" "check-transparency"
+       "finding-action" "finding-detail" "finding-fixed"
+       "finding-kind" "finding-name" "finding-version"
+       "load-registry-advisories")
+     ("file" . "lib/std/pkg/audit.ss")
+     ("tier" . "stable"))
+   ("(std pkg build)"
+     ("exports" "build-attestation" "build-plan-command"
+       "build-plan-degraded?" "build-plan-gate"
+       "build-plan-sandbox-policy" "build-plan?"
+       "build-result-attestation" "build-result-backend"
+       "build-result-log" "build-result-ok?" "build-result?"
+       "plan-build" "run-build")
+     ("file" . "lib/std/pkg/build.ss")
+     ("tier" . "stable"))
+   ("(std pkg canonical)"
+     ("exports" "canonical-json" "canonical-json-bytes")
+     ("file" . "lib/std/pkg/canonical.ss")
+     ("tier" . "stable"))
+   ("(std pkg cli)"
+     ("exports"
+       "jpkg-command-names"
+       "jpkg-help-text"
+       "jpkg-main"
+       "jpkg-version")
+     ("file" . "lib/std/pkg/cli.ss")
+     ("tier" . "stable"))
+   ("(std pkg commands)"
+     ("exports" "cmd-add" "cmd-audit" "cmd-build" "cmd-clean"
+      "cmd-dir" "cmd-env" "cmd-init" "cmd-install" "cmd-link"
+      "cmd-list" "cmd-new" "cmd-pack" "cmd-policy" "cmd-publish"
+      "cmd-remove" "cmd-search" "cmd-uninstall" "cmd-unlink"
+      "cmd-update" "cmd-verify")
+     ("file" . "lib/std/pkg/commands.ss")
+     ("tier" . "stable"))
+   ("(std pkg dsse)"
+     ("exports" "dsse-envelope->json" "dsse-json->envelope"
+       "dsse-pae" "dsse-payload" "dsse-sign" "dsse-verify")
+     ("file" . "lib/std/pkg/dsse.ss")
+     ("tier" . "stable"))
+   ("(std pkg ed25519)"
+     ("exports" "bytes->hex" "ed25519-public-key" "ed25519-sign*"
+       "ed25519-verify*" "hex->bytes")
+     ("file" . "lib/std/pkg/ed25519.ss")
+     ("tier" . "stable"))
+   ("(std pkg gzipio)"
+     ("exports" "crc32-of" "gunzip-checked" "gzip-deterministic")
+     ("file" . "lib/std/pkg/gzipio.ss")
+     ("tier" . "stable"))
+   ("(std pkg lock)"
+     ("exports" "lock-file-name" "lock-parse-file" "lock-parse-string"
+       "lock-render" "lock-write-file"
+       "locked-package-artifact-sha256"
+       "locked-package-artifact-size" "locked-package-dependencies"
+       "locked-package-link" "locked-package-manifest-sha256"
+       "locked-package-name" "locked-package-registry"
+       "locked-package-version" "locked-package-yanked?"
+       "locked-package?" "make-locked-package")
+     ("file" . "lib/std/pkg/lock.ss")
+     ("tier" . "stable"))
+   ("(std pkg manifest)"
+     ("exports" "make-manifest" "manifest->canonical-json"
+      "manifest->sexp-text" "manifest-capabilities"
+      "manifest-dependencies" "manifest-description"
+      "manifest-dev-dependencies" "manifest-jerboa-req"
+      "manifest-license" "manifest-modules" "manifest-name"
+      "manifest-source" "manifest-template" "manifest-version"
+      "manifest?" "parse-manifest-datum" "parse-manifest-file"
+      "parse-manifest-string" "valid-package-name?"
+      "valid-relative-path?")
+     ("file" . "lib/std/pkg/manifest.ss")
+     ("tier" . "stable"))
+   ("(std pkg policy)"
+     ("exports" "capability-ffi-libs" "capability-native?"
+       "capability-network-build?" "capability-network-test?"
+       "gate-build-capabilities" "make-policy" "parse-policy-file"
+       "policy-allow-build-network?" "policy-allow-exceptions?"
+       "policy-allow-ffi?" "policy-allow-local-deps?"
+       "policy-allow-native?" "policy-allow-test-network?"
+       "policy-mode-name" "policy-mode?" "policy-modes"
+       "policy-require-provenance?" "policy-require-signatures?"
+       "resolve-policy")
+     ("file" . "lib/std/pkg/policy.ss")
+     ("tier" . "stable"))
+   ("(std pkg project)"
+     ("exports" "env-dir-name" "multi-registry-provider" "project-add"
+       "project-env-paths" "project-install" "project-link"
+       "project-list" "project-lock-packages" "project-remove"
+       "project-resolve" "project-uninstall" "project-unlink"
+       "project-update" "project-verify-lock")
+     ("file" . "lib/std/pkg/project.ss")
+     ("tier" . "stable"))
+   ("(std pkg provenance)"
+     ("exports" "INTOTO-PAYLOAD-TYPE" "INTOTO-STATEMENT-TYPE"
+       "SLSA-PREDICATE-TYPE" "authorized-keys-of"
+       "make-package-signature" "make-provenance"
+       "provenance-builder-id" "pubhex->keyid"
+       "publishers-builders-for" "publishers-keys-for"
+       "publishers-parse" "signed-subject" "signed-subject-bytes"
+       "sigstore-bundle-verify" "slsa-statement-bytes"
+       "verify-package-signature" "verify-provenance")
+     ("file" . "lib/std/pkg/provenance.ss")
+     ("tier" . "stable"))
+   ("(std pkg publish)"
+     ("exports" "publish-key-public-hex" "publish-keygen"
+       "publish-load-key" "publish-to-registry"
+       "publishers-json-of" "staging-registry-init!")
+     ("file" . "lib/std/pkg/publish.ss")
+     ("tier" . "stable"))
+   ("(std pkg rebuild)"
+     ("exports"
+       "rebuild-digest"
+       "rebuild-verify"
+       "review->lines"
+       "review-package")
+     ("file" . "lib/std/pkg/rebuild.ss")
+     ("tier" . "stable"))
+   ("(std pkg registry)"
+     ("exports" "registry-add-package!"
+      "registry-add-signed-package!" "registry-blob-path"
+      "registry-config" "registry-fetch-blob"
+      "registry-generate-skeleton" "registry-lookup"
+      "registry-package-versions" "registry-publishers"
+      "registry-release" "registry-release-for"
+      "registry-verify-authorship" "registry-versions-for"
+      "registry-yank!" "release-info-artifact-sha256"
+      "release-info-artifact-size" "release-info-capabilities"
+      "release-info-dependencies" "release-info-manifest-sha256"
+      "release-info-name" "release-info-version"
+      "release-info-yanked?" "release-info?" "tuf-cache-reset!")
+     ("file" . "lib/std/pkg/registry.ss")
+     ("tier" . "stable"))
+   ("(std pkg resolve)"
+     ("exports" "resolution-conflict?" "resolve-dependencies")
+     ("file" . "lib/std/pkg/resolve.ss")
+     ("tier" . "stable"))
+   ("(std pkg search)"
+     ("exports" "dir-add!" "dir-list" "dir-remove!" "search-index"
+       "search-packages" "search-row-description" "search-row-name"
+       "search-row-provenance?" "search-row-registry"
+       "search-row-tuf?" "search-row-version" "search-row-yanked?"
+       "search-row?")
+     ("file" . "lib/std/pkg/search.ss")
+     ("tier" . "stable"))
+   ("(std pkg semver)"
+     ("exports" "range->string" "range-matches?" "range-parse"
+       "range-try-parse" "semver->string" "semver-build"
+       "semver-compare" "semver-major" "semver-minor"
+       "semver-parse" "semver-patch" "semver-prerelease"
+       "semver-try-parse" "semver<?" "semver=?" "semver>?"
+       "semver?")
+     ("file" . "lib/std/pkg/semver.ss")
+     ("tier" . "stable"))
+   ("(std pkg sha512)"
+     ("exports" "sha512-bytevector" "sha512-hex")
+     ("file" . "lib/std/pkg/sha512.ss")
+     ("tier" . "stable"))
+   ("(std pkg store)"
+     ("exports" "jpkg-home" "store-dir" "store-has?" "store-list"
+       "store-path" "store-put!" "store-remove!" "store-verify"
+       "valid-digest?")
+     ("file" . "lib/std/pkg/store.ss")
+     ("tier" . "stable"))
+   ("(std pkg tarball)"
+     ("exports" "jpkg-max-entries" "jpkg-max-file-size"
+       "jpkg-max-path-length" "jpkg-max-total-size"
+       "tar-create-deterministic" "tar-entry-content"
+       "tar-entry-dir?" "tar-entry-exec?" "tar-entry-name"
+       "tar-entry-size" "tar-extract-validated" "tar-validate")
+     ("file" . "lib/std/pkg/tarball.ss")
+     ("tier" . "stable"))
+   ("(std pkg transparency)"
+     ("exports" "entry-digest" "entry-index" "entry-keyid" "entry-name"
+       "entry-version" "transparency->json" "transparency-append"
+       "transparency-consistent?" "transparency-empty"
+       "transparency-head" "transparency-includes?"
+       "transparency-length" "transparency-parse"
+       "transparency-verify-chain")
+     ("file" . "lib/std/pkg/transparency.ss")
+     ("tier" . "stable"))
+   ("(std pkg tuf)"
+     ("exports" "canonical-of-json-text" "iso8601-of-epoch"
+       "json-file->canonical" "key->keyid" "signed-payload-bytes"
+       "tuf-all-target-paths" "tuf-context" "tuf-keygen" "tuf-now"
+       "tuf-registry-delegate!" "tuf-registry-init!"
+       "tuf-registry-sign!" "tuf-registry-sign-delegated!"
+       "tuf-registry?" "tuf-rotate-root!" "tuf-transfer-scope!"
+       "tuf-verified-target-bytes")
+     ("file" . "lib/std/pkg/tuf.ss")
+     ("tier" . "stable"))
+   ("(std pkg util)"
+     ("exports" "bytes->utf8-or-false" "file-size-of" "jpkg-error"
+      "jpkg-error-message" "jpkg-error?" "mkdir-p" "path-basename"
+      "path-concat" "path-dirname" "random-suffix"
+      "read-file-bytevector" "remove-tree"
+      "sha256-hex-of-bytevector" "sha256-hex-of-file"
+      "string-join-list" "string-prefix-of?" "string-split-char"
+      "string-suffix-of?" "valid-utf8?" "walk-files"
+      "write-file-bytevector")
+     ("file" . "lib/std/pkg/util.ss")
+     ("tier" . "stable"))
    ("(std pmap)"
      ("exports" "in-pmap" "in-pmap-keys" "in-pmap-pairs"
       "in-pmap-values" "make-persistent-map" "persistent-map"
@@ -5574,13 +5810,14 @@
      ("file" . "lib/std/security/seatbelt.ss")
      ("tier" . "stable"))
    ("(std security seccomp)"
-     ("exports" "compute-only-filter" "io-only-filter"
-       "make-seccomp-filter" "network-server-filter"
+     ("exports" "compute-only-filter" "dangerous-syscalls" "io-only-filter"
+       "make-seccomp-blocklist" "make-seccomp-filter"
+       "network-server-filter" "safe-blocklist"
        "seccomp-available?" "seccomp-errno"
        "seccomp-filter-allowed-syscalls"
-       "seccomp-filter-default-action" "seccomp-filter?"
-       "seccomp-install!" "seccomp-kill" "seccomp-log"
-       "seccomp-trap")
+       "seccomp-filter-default-action" "seccomp-filter-kind"
+       "seccomp-filter?" "seccomp-install!" "seccomp-kill"
+       "seccomp-log" "seccomp-trap")
      ("file" . "lib/std/security/seccomp.ss")
      ("tier" . "stable"))
    ("(std security secret)"
@@ -6685,13 +6922,13 @@
      ("file" . "lib/std/zipper.ss")
      ("tier" . "stable")))
   ("source_root" . "/Users/user/mine/jerboa")
-  ("stats" ("modules" . 679) ("parse_errors" . 0) ("symbols" . 9910)
+  ("stats" ("modules" . 706) ("parse_errors" . 0) ("symbols" . 10246)
     ("tiers"
       ("compat" . 47)
       ("core" . 34)
-      ("stable" . 520)
+      ("stable" . 547)
       ("unstable" . 78))
-    ("total_exports" . 13080))
+    ("total_exports" . 13443))
   ("symbol_index" ("%chan-enqueue-raw!" "(std csp)")
    ("&actor-dead" "(std error conditions)")
    ("&actor-timeout" "(std error conditions)")
@@ -6827,7 +7064,10 @@
    ("*resource-finalizer-log*" "(std safe)")
    ("*rust-max-decompressed-size*"
      "(std compress native-rust)")
-   ("*safe-mode*" "(jerboa prelude safe)" "(std safe)")
+   ("*safe-mode*"
+     "(jerboa prelude safe)"
+     "(jerboa prelude)"
+     "(std safe)")
    ("*sandbox-capsicum*" "(std security sandbox)")
    ("*sandbox-landlock*"
      "(jerboa prelude safe)"
@@ -6848,6 +7088,7 @@
    ("*taint-violations*" "(std taint)")
    ("*test-suites*" "(std test framework)")
    ("*trusted-modules*" "(std security import-audit)")
+   ("*try-debug*" "(jerboa prelude)")
    ("*type-errors*" "(std typed infer)")
    ("*type-errors-fatal*" "(std typed check)")
    ("*typed-mode*" "(std typed)")
@@ -7036,6 +7277,8 @@
    ("IMM-VOID" "(jerboa wasm values)")
    ("INDEXED-VALS" "(std specter)")
    ("INTERNAL-ERROR" "(lsp jsonrpc)")
+   ("INTOTO-PAYLOAD-TYPE" "(std pkg provenance)")
+   ("INTOTO-STATEMENT-TYPE" "(std pkg provenance)")
    ("INVALID-PARAMS" "(lsp jsonrpc)")
    ("INVALID-REQUEST" "(lsp jsonrpc)")
    ("IN_ACCESS" "(std os inotify)" "(std os inotify-native)")
@@ -7222,6 +7465,7 @@
    ("SK-STRING" "(lsp types)") ("SK-STRUCT" "(lsp types)")
    ("SK-TYPEPARAMETER" "(lsp types)")
    ("SK-VARIABLE" "(lsp types)")
+   ("SLSA-PREDICATE-TYPE" "(std pkg provenance)")
    ("SQLITE_BLOB" "(std db sqlite)" "(std db sqlite-native)")
    ("SQLITE_DONE" "(std db sqlite)" "(std db sqlite-native)")
    ("SQLITE_FLOAT" "(std db sqlite)" "(std db sqlite-native)")
@@ -7343,6 +7587,8 @@
      "(std misc alist)")
    ("acquire" "(std effect resource)")
    ("acquire-port" "(std effect resource)")
+   ("action-blocks-all?" "(std pkg advisory)")
+   ("action-blocks-new?" "(std pkg advisory)")
    ("activate-cloj-reader!" "(jerboa cloj)" "(jerboa clojure)")
    ("active-pattern-proc" "(std match2)")
    ("active-pattern?" "(std match2)")
@@ -7384,6 +7630,17 @@
    ("advise-before" "(std misc advice)")
    ("advise-error" "(std error-advice)")
    ("advised?" "(std misc advice)")
+   ("advisories-for" "(std pkg advisory)")
+   ("advisory-action" "(std pkg advisory)")
+   ("advisory-action-rank" "(std pkg advisory)")
+   ("advisory-affected" "(std pkg advisory)")
+   ("advisory-affects?" "(std pkg advisory)")
+   ("advisory-aliases" "(std pkg advisory)")
+   ("advisory-fixed-versions" "(std pkg advisory)")
+   ("advisory-id" "(std pkg advisory)")
+   ("advisory-severity" "(std pkg advisory)")
+   ("advisory-summary" "(std pkg advisory)")
+   ("advisory?" "(std pkg advisory)")
    ("aead-decrypt" "(std crypto aead)")
    ("aead-encrypt" "(std crypto aead)")
    ("aead-key-generate" "(std crypto aead)")
@@ -7644,11 +7901,19 @@
    ("arity-error-got" "(std errors)")
    ("arity-error-who" "(std errors)")
    ("arity-error?" "(std errors)")
+   ("artifact-extract" "(std pkg artifact)")
+   ("artifact-file-name" "(std pkg artifact)")
+   ("artifact-info-digest" "(std pkg artifact)")
+   ("artifact-info-entries" "(std pkg artifact)")
+   ("artifact-info-manifest" "(std pkg artifact)")
+   ("artifact-info-size" "(std pkg artifact)")
+   ("artifact-info?" "(std pkg artifact)")
    ("artifact-store-get" "(std build reproducible)")
    ("artifact-store-has?" "(std build reproducible)")
    ("artifact-store-path" "(std build reproducible)")
    ("artifact-store-put!" "(std build reproducible)")
    ("artifact-store?" "(std build reproducible)")
+   ("artifact-validate" "(std pkg artifact)")
    ("as->"
      "(jerboa clojure)"
      "(jerboa prelude)"
@@ -7781,7 +8046,10 @@
    ("audit-policy-violation" "(std security audit-log)")
    ("audit-process-exit" "(std security audit-log)")
    ("audit-process-start" "(std security audit-log)")
+   ("audit-project" "(std pkg audit)")
    ("audit-redactor-secrets" "(std security audit-log)")
+   ("audit-report-blocking?" "(std pkg audit)")
+   ("audit-report-findings" "(std pkg audit)")
    ("auth-result-authenticated?" "(std security auth)")
    ("auth-result-identity" "(std security auth)")
    ("auth-result-roles" "(std security auth)")
@@ -7797,6 +8065,7 @@
    ("authenticated-message-timestamp"
      "(std actor cluster-security)")
    ("authenticated-message?" "(std actor cluster-security)")
+   ("authorized-keys-of" "(std pkg provenance)")
    ("auto-clone" "(std derive2)")
    ("auto-compare" "(std derive2)")
    ("auto-display" "(std derive2)")
@@ -7952,6 +8221,7 @@
    ("buffered-write-line" "(std io bio)")
    ("buffered-write-string" "(std io bio)")
    ("build-app" "(std match-syntax)")
+   ("build-attestation" "(std pkg build)")
    ("build-begin" "(std match-syntax)")
    ("build-binary" "(jerboa build)")
    ("build-boot-file" "(jerboa build)")
@@ -7970,6 +8240,11 @@
    ("build-matrix-results" "(std build cross)")
    ("build-musl-binary" "(jerboa build musl)")
    ("build-nfa" "(std text regex-compile)")
+   ("build-plan-command" "(std pkg build)")
+   ("build-plan-degraded?" "(std pkg build)")
+   ("build-plan-gate" "(std pkg build)")
+   ("build-plan-sandbox-policy" "(std pkg build)")
+   ("build-plan?" "(std pkg build)")
    ("build-project" "(jerboa build)" "(std build)")
    ("build-query-string" "(std net http)" "(std net request)")
    ("build-record-deps-hash" "(std build reproducible)")
@@ -7978,6 +8253,11 @@
    ("build-record-timestamp" "(std build reproducible)")
    ("build-record?" "(std build reproducible)")
    ("build-release" "(jerboa build)")
+   ("build-result-attestation" "(std pkg build)")
+   ("build-result-backend" "(std pkg build)")
+   ("build-result-log" "(std pkg build)")
+   ("build-result-ok?" "(std pkg build)")
+   ("build-result?" "(std pkg build)")
    ("build-static-binary" "(jerboa build)")
    ("build-system-add-rule!" "(std build watch)")
    ("build-system-build!" "(std build watch)")
@@ -8003,8 +8283,10 @@
    ("bv-u64-ref" "(std binary)") ("bv-u64-set!" "(std binary)")
    ("bv-u8-ref" "(std binary)") ("bv-u8-set!" "(std binary)")
    ("bwp-object?" "(std ephemeron)")
+   ("bytes->hex" "(std pkg ed25519)")
    ("bytes->message" "(std actor transport)")
    ("bytes->string" "(jerboa core)" "(std gambit-compat)")
+   ("bytes->utf8-or-false" "(std pkg util)")
    ("bytevector->bn" "(std crypto bn)")
    ("bytevector->fasl" "(std fasl)")
    ("bytevector->generator" "(std srfi srfi-158)")
@@ -8085,8 +8367,12 @@
    ("call-with-resource"
      "(jerboa prelude safe)"
      "(std resource)")
-   ("call-with-safe-input-file" "(jerboa prelude safe)")
-   ("call-with-safe-output-file" "(jerboa prelude safe)")
+   ("call-with-safe-input-file"
+     "(jerboa prelude safe)"
+     "(jerboa prelude)")
+   ("call-with-safe-output-file"
+     "(jerboa prelude safe)"
+     "(jerboa prelude)")
    ("call-with-temp-home" "(std os temp-home)")
    ("call-with-temporary-directory" "(std os temp)")
    ("call-with-temporary-file" "(std os temp)")
@@ -8098,10 +8384,17 @@
    ("cancellation-token?" "(std concur async-await)")
    ("cancelled-fiber-id" "(std fiber)")
    ("cancelled?" "(std task)")
+   ("canonical-json" "(std pkg canonical)")
+   ("canonical-json-bytes" "(std pkg canonical)")
+   ("canonical-of-json-text" "(std pkg tuf)")
    ("cap-connect" "(std capability)")
    ("cap-file-open" "(std capability)")
    ("cap-file-read" "(std capability)")
    ("cap-file-write" "(std capability)")
+   ("capability-ffi-libs" "(std pkg policy)")
+   ("capability-native?" "(std pkg policy)")
+   ("capability-network-build?" "(std pkg policy)")
+   ("capability-network-test?" "(std pkg policy)")
    ("capability-permissions" "(std security capability)")
    ("capability-requirements"
      "(std security capability-typed)")
@@ -8367,6 +8660,7 @@
    ("check-return-type!" "(std typed)")
    ("check-row-type!" "(std typed row2)")
    ("check-taint-label!" "(std taint)")
+   ("check-transparency" "(std pkg audit)")
    ("check-true" "(std test framework)")
    ("check-type" "(std typed infer)")
    ("check-type!" "(std typed)")
@@ -8513,6 +8807,26 @@
    ("cluster-size" "(std distributed)")
    ("cluster-whereis" "(std actor distributed)")
    ("cluster?" "(std distributed)")
+   ("cmd-add" "(std pkg commands)")
+   ("cmd-audit" "(std pkg commands)")
+   ("cmd-build" "(std pkg commands)")
+   ("cmd-clean" "(std pkg commands)")
+   ("cmd-dir" "(std pkg commands)")
+   ("cmd-env" "(std pkg commands)")
+   ("cmd-init" "(std pkg commands)")
+   ("cmd-install" "(std pkg commands)")
+   ("cmd-link" "(std pkg commands)")
+   ("cmd-list" "(std pkg commands)")
+   ("cmd-new" "(std pkg commands)")
+   ("cmd-pack" "(std pkg commands)")
+   ("cmd-policy" "(std pkg commands)")
+   ("cmd-publish" "(std pkg commands)")
+   ("cmd-remove" "(std pkg commands)")
+   ("cmd-search" "(std pkg commands)")
+   ("cmd-uninstall" "(std pkg commands)")
+   ("cmd-unlink" "(std pkg commands)")
+   ("cmd-update" "(std pkg commands)")
+   ("cmd-verify" "(std pkg commands)")
    ("code-expr" "(std quasiquote-types)")
    ("code-type" "(std quasiquote-types)")
    ("code?" "(std quasiquote-types)")
@@ -8818,6 +9132,7 @@
    ("cprintf" "(std text printf)")
    ("cpu-count" "(jerboa prelude)" "(std actor scheduler)"
      "(std actor)" "(std gambit-compat)" "(std misc cpu)")
+   ("crc32-of" "(std pkg gzipio)")
    ("create-directory" "(jerboa core)" "(std gambit-compat)")
    ("create-directory*" "(jerboa core)" "(std gambit-compat)")
    ("create-temporary-file" "(std os temporaries)")
@@ -8939,6 +9254,7 @@
    ("dag-reachable" "(std misc dag)")
    ("dag-sinks" "(std misc dag)")
    ("dag-sources" "(std misc dag)") ("dag?" "(std misc dag)")
+   ("dangerous-syscalls" "(std security seccomp)")
    ("dataframe->alists" "(std dataframe)")
    ("dataframe->csv-string" "(std dataframe)")
    ("dataframe->vectors" "(std dataframe)")
@@ -9531,6 +9847,9 @@
    ("digest->hex-string" "(std crypto digest)")
    ("digest->u8vector" "(std crypto digest)")
    ("dim" "(std cli style)" "(std misc terminal)")
+   ("dir-add!" "(std pkg search)")
+   ("dir-list" "(std pkg search)")
+   ("dir-remove!" "(std pkg search)")
    ("directory-exists?"
      "(jerboa clojure)"
      "(jerboa prelude)"
@@ -9672,6 +9991,12 @@
    ("dropping-while" "(std transducer)")
    ("dsend" "(std actor distributed)")
    ("dsend/ask" "(std actor distributed)")
+   ("dsse-envelope->json" "(std pkg dsse)")
+   ("dsse-json->envelope" "(std pkg dsse)")
+   ("dsse-pae" "(std pkg dsse)")
+   ("dsse-payload" "(std pkg dsse)")
+   ("dsse-sign" "(std pkg dsse)")
+   ("dsse-verify" "(std pkg dsse)")
    ("dsupervisor-handle-node-failure!" "(std actor cluster)")
    ("dsupervisor-start-child!" "(std actor cluster)")
    ("dsupervisor-stop-child!" "(std actor cluster)")
@@ -9757,8 +10082,11 @@
    ("each-in-list" "(std srfi srfi-159)")
    ("each-traversal" "(std lens)")
    ("ed25519-keygen" "(std crypto pkey)")
+   ("ed25519-public-key" "(std pkg ed25519)")
    ("ed25519-sign" "(std crypto pkey)")
+   ("ed25519-sign*" "(std pkg ed25519)")
    ("ed25519-verify" "(std crypto pkey)")
+   ("ed25519-verify*" "(std pkg ed25519)")
    ("edit" "(std clojure zip)")
    ("edit-distance" "(std misc diff)" "(std text diff)")
    ("edn->string" "(std text edn)")
@@ -9782,6 +10110,17 @@
    ("effect-type-effect" "(std typed)")
    ("effect-type-result" "(std typed)")
    ("effect-type?" "(std typed)")
+   ("egress-policy-default-action" "(std os limits sandbox)")
+   ("egress-policy-host-allowed?" "(std os limits sandbox)")
+   ("egress-policy-host-decision" "(std os limits sandbox)")
+   ("egress-policy-proxy-allowlist" "(std os limits sandbox)")
+   ("egress-policy-require-full-isolation?"
+     "(std os limits sandbox)")
+   ("egress-policy-rules" "(std os limits sandbox)")
+   ("egress-policy?" "(std os limits sandbox)")
+   ("egress-rule-action" "(std os limits sandbox)")
+   ("egress-rule-target" "(std os limits sandbox)")
+   ("egress-rule?" "(std os limits sandbox)")
    ("eighth" "(std srfi srfi-1)")
    ("elaborate-typed-def-ir" "(jerboa typed checker)")
    ("elaborated-def-body-ir" "(jerboa typed checker)")
@@ -9826,7 +10165,13 @@
    ("engine-run" "(std engine)")
    ("enqueue!" "(std misc queue)") ("ensure" "(std stm)")
    ("ensure-directory" "(std os path-util)")
+   ("entry-digest" "(std pkg transparency)")
+   ("entry-index" "(std pkg transparency)")
+   ("entry-keyid" "(std pkg transparency)")
+   ("entry-name" "(std pkg transparency)")
+   ("entry-version" "(std pkg transparency)")
    ("enumerating" "(std transducer)")
+   ("env-dir-name" "(std pkg project)")
    ("env-override!" "(std config)")
    ("env-policy" "(std security env)")
    ("env-policy-allow!" "(std security env)")
@@ -10208,6 +10553,7 @@
    ("file-readable?" "(std os file-info)")
    ("file-sha256-hex" "(std build verify)")
    ("file-size" "(std os file-info)" "(std os path-util)")
+   ("file-size-of" "(std pkg util)")
    ("file-type" "(std os file-info)")
    ("file-writable?" "(std os file-info)")
    ("filter!" "(std srfi srfi-1)")
@@ -10242,8 +10588,14 @@
    ("find-suggestions" "(std errors)")
    ("find-symbol-in-workspace" "(lsp analysis index)")
    ("find-tail" "(std srfi srfi-1)")
+   ("finding-action" "(std pkg audit)")
    ("finding-allowed?" "(std security profile)")
+   ("finding-detail" "(std pkg audit)")
+   ("finding-fixed" "(std pkg audit)")
+   ("finding-kind" "(std pkg audit)")
+   ("finding-name" "(std pkg audit)")
    ("finding-severity" "(std security profile)")
+   ("finding-version" "(std pkg audit)")
    ("finish-span!" "(std span)")
    ("first"
      "(jerboa clojure)"
@@ -10541,6 +10893,7 @@
    ("gambit-heap-size" "(std compat gambit)")
    ("gambit-object->string" "(std compat gambit)")
    ("gappend" "(std srfi srfi-121)" "(std srfi srfi-158)")
+   ("gate-build-capabilities" "(std pkg policy)")
    ("gauge-dec!" "(std metrics)")
    ("gauge-inc!" "(std metrics)")
    ("gauge-set!" "(std metrics)")
@@ -10768,8 +11121,10 @@
    ("guardian-pool?" "(std misc guardian-pool)")
    ("guardian-register!" "(std guardian)")
    ("gunzip-bytevector" "(std compress zlib)")
+   ("gunzip-checked" "(std pkg gzipio)")
    ("gzip-bytevector" "(std compress zlib)")
    ("gzip-data?" "(std compress zlib)")
+   ("gzip-deterministic" "(std pkg gzipio)")
    ("hamt->alist" "(std misc persistent)")
    ("hamt-contains?" "(std misc persistent)")
    ("hamt-delete" "(std misc persistent)")
@@ -10979,6 +11334,7 @@
    ("heap-report" "(std debug heap)")
    ("heap-size" "(std debug heap)" "(std misc heap)")
    ("heap?" "(std misc heap)") ("hex->bn" "(std crypto bn)")
+   ("hex->bytes" "(std pkg ed25519)")
    ("hex-decode" "(std text hex)")
    ("hex-encode" "(std text hex)")
    ("hex-string->bytevector" "(std debug disassemble)")
@@ -11430,7 +11786,8 @@
    ("is-literal-null?" "(std typed solver)")
    ("is-literal-positive?" "(std typed solver)")
    ("is-literal-zero?" "(std typed solver)")
-   ("isa?" "(std multi)") ("itake" "(std srfi srfi-116)")
+   ("isa?" "(std multi)") ("iso8601-of-epoch" "(std pkg tuf)")
+   ("itake" "(std srfi srfi-116)")
    ("italic" "(std cli style)" "(std misc terminal)")
    ("iterate" "(jerboa clojure)" "(std clojure)")
    ("iterate-n"
@@ -11488,6 +11845,20 @@
    ("joined/prefix" "(std srfi srfi-159)")
    ("joined/range" "(std srfi srfi-159)")
    ("joined/suffix" "(std srfi srfi-159)")
+   ("jpkg-command-names" "(std pkg cli)")
+   ("jpkg-error" "(std pkg util)")
+   ("jpkg-error-message" "(std pkg util)")
+   ("jpkg-error?" "(std pkg util)")
+   ("jpkg-help-text" "(std pkg cli)")
+   ("jpkg-home" "(std pkg store)")
+   ("jpkg-main" "(std pkg cli)")
+   ("jpkg-max-artifact-bytes" "(std pkg artifact)")
+   ("jpkg-max-entries" "(std pkg tarball)")
+   ("jpkg-max-file-size" "(std pkg tarball)")
+   ("jpkg-max-path-length" "(std pkg tarball)")
+   ("jpkg-max-total-size" "(std pkg tarball)")
+   ("jpkg-version" "(std pkg cli)")
+   ("json-file->canonical" "(std pkg tuf)")
    ("json-get" "(lsp jsonrpc)") ("json-obj" "(lsp jsonrpc)")
    ("json-object->string" "(jerboa clojure)" "(jerboa prelude clean)"
      "(jerboa prelude safe)" "(jerboa prelude)" "(std prelude)"
@@ -11515,7 +11886,8 @@
      "(jerboa prelude)"
      "(std misc list)"
      "(std prelude)")
-   ("keep-indexed" "(std clojure)") ("keypath" "(std specter)")
+   ("keep-indexed" "(std clojure)")
+   ("key->keyid" "(std pkg tuf)") ("keypath" "(std specter)")
    ("keys" "(jerboa clojure)" "(std clojure)")
    ("keyword->string" "(jerboa clojure)" "(jerboa core)" "(jerboa prelude clean)"
      "(jerboa prelude safe)" "(jerboa prelude)"
@@ -11995,11 +12367,13 @@
    ("llvm-symbol-name" "(jerboa typed llvmir)")
    ("lmap" "(std lazy)") ("lnull" "(std lazy)")
    ("lnull?" "(std lazy)")
+   ("load-advisories-from-dir" "(std pkg advisory)")
    ("load-c-header" "(std foreign bind)")
    ("load-config" "(std config)")
    ("load-image" "(std persist image)")
    ("load-profile!" "(std dev pgo)")
    ("load-project-config" "(lsp analysis project-config)")
+   ("load-registry-advisories" "(std pkg audit)")
    ("load-security-profile" "(std security profile)")
    ("load-service-config" "(std service config)")
    ("load-shared-object" "(std foreign)")
@@ -12020,8 +12394,23 @@
    ("lock-entry-name" "(jerboa lock)")
    ("lock-entry-version" "(jerboa lock)")
    ("lock-entry?" "(jerboa lock)")
+   ("lock-file-name" "(std pkg lock)")
    ("lock-object" "(std ftype)")
    ("lock-order-violations" "(std concur)")
+   ("lock-parse-file" "(std pkg lock)")
+   ("lock-parse-string" "(std pkg lock)")
+   ("lock-render" "(std pkg lock)")
+   ("lock-write-file" "(std pkg lock)")
+   ("locked-package-artifact-sha256" "(std pkg lock)")
+   ("locked-package-artifact-size" "(std pkg lock)")
+   ("locked-package-dependencies" "(std pkg lock)")
+   ("locked-package-link" "(std pkg lock)")
+   ("locked-package-manifest-sha256" "(std pkg lock)")
+   ("locked-package-name" "(std pkg lock)")
+   ("locked-package-registry" "(std pkg lock)")
+   ("locked-package-version" "(std pkg lock)")
+   ("locked-package-yanked?" "(std pkg lock)")
+   ("locked-package?" "(std pkg lock)")
    ("lockfile->sexp" "(jerboa lock)")
    ("lockfile-add!" "(jerboa lock)")
    ("lockfile-diff" "(jerboa lock)")
@@ -12279,6 +12668,8 @@
    ("make-edn-set" "(std text edn)")
    ("make-eff-type" "(std typed effects)")
    ("make-effect-type" "(std typed)")
+   ("make-egress-policy" "(std os limits sandbox)")
+   ("make-egress-rule" "(std os limits sandbox)")
    ("make-elaborated-def" "(jerboa typed checker)")
    ("make-element" "(std markup sxml)")
    ("make-email" "(std net smtp)")
@@ -12398,6 +12789,7 @@
    ("make-list-queue" "(std srfi srfi-117)")
    ("make-location" "(std lsp)")
    ("make-lock-entry" "(jerboa lock)")
+   ("make-locked-package" "(std pkg lock)")
    ("make-lockfile" "(jerboa lock)")
    ("make-logger" "(std log)")
    ("make-logger-options" "(std logger)")
@@ -12414,7 +12806,10 @@
      "(std actor bounded)"
      "(std error conditions)")
    ("make-managed-ptr" "(std foreign bind)")
-   ("make-manifest" "(jerboa pkg)" "(std build reproducible)")
+   ("make-manifest"
+     "(jerboa pkg)"
+     "(std build reproducible)"
+     "(std pkg manifest)")
    ("make-method-obj" "(std clos)")
    ("make-mime-message" "(std mime struct)")
    ("make-mime-part" "(std mime struct)")
@@ -12474,6 +12869,7 @@
    ("make-p9-twalk" "(std net 9p)")
    ("make-p9-twrite" "(std net 9p)")
    ("make-package" "(jerboa pkg)")
+   ("make-package-signature" "(std pkg provenance)")
    ("make-parents" "(std clojure io)")
    ("make-parse-depth-exceeded" "(std error conditions)")
    ("make-parse-error" "(std error conditions)")
@@ -12495,6 +12891,7 @@
    ("make-pmap-cell" "(std data pmap)")
    ("make-pncounter" "(std actor crdt)")
    ("make-pointerlike" "(std misc guardian-pool)")
+   ("make-policy" "(std pkg policy)")
    ("make-pool" "(std misc pool)")
    ("make-position" "(std lsp)")
    ("make-posix-error" "(std os posix)")
@@ -12511,7 +12908,9 @@
    ("make-prompt-tag"
      "(std control delimited)"
      "(std misc delimited)")
-   ("make-provenance" "(std build reproducible)")
+   ("make-provenance"
+     "(std build reproducible)"
+     "(std pkg provenance)")
    ("make-pub" "(std csp ops)")
    ("make-query" "(std db query-compile)")
    ("make-queue" "(std misc queue)")
@@ -12598,6 +12997,7 @@
      "(std actor)"
      "(std sched)")
    ("make-schema" "(std schema)" "(std text json-schema)")
+   ("make-seccomp-blocklist" "(std security seccomp)")
    ("make-seccomp-error" "(std os seccomp)")
    ("make-seccomp-filter" "(std security seccomp)")
    ("make-secret" "(std security secret)")
@@ -12773,16 +13173,32 @@
      "(std text yaml nodes)"
      "(std text yaml)")
    ("manifest->alist" "(std build reproducible)")
+   ("manifest->canonical-json" "(std pkg manifest)")
+   ("manifest->sexp-text" "(std pkg manifest)")
    ("manifest->string" "(std build reproducible)")
    ("manifest-add" "(jerboa pkg)")
    ("manifest-add!" "(std build reproducible)")
+   ("manifest-capabilities" "(std pkg manifest)")
+   ("manifest-dependencies" "(std pkg manifest)")
+   ("manifest-description" "(std pkg manifest)")
+   ("manifest-dev-dependencies" "(std pkg manifest)")
    ("manifest-from-string" "(std build reproducible)")
    ("manifest-get" "(std build reproducible)")
    ("manifest-hash" "(std build reproducible)")
+   ("manifest-jerboa-req" "(std pkg manifest)")
+   ("manifest-license" "(std pkg manifest)")
    ("manifest-lookup" "(jerboa pkg)")
+   ("manifest-modules" "(std pkg manifest)")
+   ("manifest-name" "(std pkg manifest)")
    ("manifest-packages" "(jerboa pkg)")
    ("manifest-remove" "(jerboa pkg)")
-   ("manifest?" "(jerboa pkg)" "(std build reproducible)")
+   ("manifest-source" "(std pkg manifest)")
+   ("manifest-template" "(std pkg manifest)")
+   ("manifest-version" "(std pkg manifest)")
+   ("manifest?"
+     "(jerboa pkg)"
+     "(std build reproducible)"
+     "(std pkg manifest)")
    ("map!" "(std srfi srfi-1)")
    ("map-const" "(std compiler partial-eval)")
    ("map-err"
@@ -12930,7 +13346,7 @@
    ("mix-out" "(std csp mix)" "(std csp ops)")
    ("mix-solo-mode" "(std csp mix)" "(std csp ops)")
    ("mix?" "(std csp mix)" "(std csp ops)")
-   ("mmap" "(std os mmap)")
+   ("mkdir-p" "(std pkg util)") ("mmap" "(std os mmap)")
    ("mmap->bytevector" "(std mmap)" "(std os mmap)")
    ("mmap-bytes-search" "(std mmap)")
    ("mmap-bytes=?" "(std mmap)")
@@ -12994,6 +13410,7 @@
    ("mult" "(std csp clj)") ("mult-policy" "(std csp ops)")
    ("mult-source" "(std csp ops)") ("mult?" "(std csp ops)")
    ("multi-path" "(std specter)")
+   ("multi-registry-provider" "(std pkg project)")
    ("multilog!" "(std service multilog)")
    ("multimethod-name" "(std multi)")
    ("multimethod?" "(std multi)")
@@ -13250,8 +13667,12 @@
    ("open-record-set" "(std typed row2)")
    ("open-record?" "(std typed row2)")
    ("open-resource-count" "(std concur)")
-   ("open-safe-input-file" "(jerboa prelude safe)")
-   ("open-safe-output-file" "(jerboa prelude safe)")
+   ("open-safe-input-file"
+     "(jerboa prelude safe)"
+     "(jerboa prelude)")
+   ("open-safe-output-file"
+     "(jerboa prelude safe)"
+     "(jerboa prelude)")
    ("open-temp-home" "(std os temp-home)")
    ("operation-timeout?" "(std safe-timeout)")
    ("optimize-level" "(std compile)")
@@ -13371,6 +13792,7 @@
    ("p9-type-tversion" "(std net 9p)")
    ("p9-type-twalk" "(std net 9p)")
    ("p9-type-twrite" "(std net 9p)")
+   ("pack-project" "(std pkg artifact)")
    ("package-author" "(jerboa pkg)")
    ("package-deps" "(jerboa pkg)")
    ("package-description" "(jerboa pkg)")
@@ -13398,6 +13820,8 @@
    ("parallel-for-each" "(std parallel)")
    ("parallel-map" "(std parallel)") ("parents" "(std multi)")
    ("parse-address" "(std net address)")
+   ("parse-advisory" "(std pkg advisory)")
+   ("parse-advisory-file" "(std pkg advisory)")
    ("parse-alt" "(std parser)")
    ("parse-alternation" "(std regex-ct-impl)")
    ("parse-any-char" "(std parser)")
@@ -13448,9 +13872,13 @@
    ("parse-literal" "(std parser)")
    ("parse-long" "(std clojure)")