Écluse

A supply-chain resilience proxy for package registries, the controlled passage every dependency clears before it reaches your build.

I leaned on an LLM heavily to build this, during bootstrapping, behind a documented process. Here's how, and how to verify it.

The problem, the resilience-not-detection bet, and the design that follows.

Deploy it, connect your clients, and lock down network egress.

Other tools in this space, and when they might suit you better.

The library Haddock, auto-published from main.

The code, the architecture docs, and the roadmap on GitHub.