# Parity-sweep allowlist (os/tests/parity-sweep.sh): names present in the reference
# image (nucleic-sandbox:v7, FROM node:22-bookworm-slim) that naros-agent deliberately
# does not carry. One name per line; every entry needs a "why".

# node:22 image plumbing, not a tool agents use.
docker-entrypoint.sh
policy-rc.d

# The node:22 image ships node under /usr/local with npx/corepack symlinked there;
# NodeSource's deb provides the same commands at /usr/bin — same names, so only
# image-internal helper names should ever land here, not node/npm/npx/corepack.

# Removed Debian transition/deprecation helpers. narOS is natively merged-/usr and
# uses signed-by keyrings instead of apt-key.
apt-key
dpkg-fsys-usrunmess

# Version-pinned Bookworm compiler names. Trixie's build-essential provides the
# current GCC suite and the same unversioned commands.
cpp-12
g++-12
gcc-12
gcc-ar-12
gcc-nm-12
gcc-ranlib-12
gcov-12
gcov-dump-12
gcov-tool-12
lto-dump-12
aarch64-linux-gnu-cpp-12
aarch64-linux-gnu-g++-12
aarch64-linux-gnu-gcc-12
aarch64-linux-gnu-gcc-ar-12
aarch64-linux-gnu-gcc-nm-12
aarch64-linux-gnu-gcc-ranlib-12
aarch64-linux-gnu-gcov-12
aarch64-linux-gnu-gcov-dump-12
aarch64-linux-gnu-gcov-tool-12
aarch64-linux-gnu-lto-dump-12
x86_64-linux-gnu-cpp-12
x86_64-linux-gnu-g++-12
x86_64-linux-gnu-gcc-12
x86_64-linux-gnu-gcc-ar-12
x86_64-linux-gnu-gcc-nm-12
x86_64-linux-gnu-gcc-ranlib-12
x86_64-linux-gnu-gcov-12
x86_64-linux-gnu-gcov-dump-12
x86_64-linux-gnu-gcov-tool-12
x86_64-linux-gnu-lto-dump-12

# Version-pinned Bookworm Python 3.11 and Perl 5.36 names. Trixie's python3,
# pip3, pydoc3, pygettext3, perl and cpan commands remain available.
cpan5.36-aarch64-linux-gnu
cpan5.36-x86_64-linux-gnu
pdb3.11
perl5.36-aarch64-linux-gnu
perl5.36-x86_64-linux-gnu
perl5.36.0
pip3.11
pydoc3.11
pygettext3.11
python3.11

# GNU gold is deprecated, while these target-prefixed gprofng aliases and dwp
# are no longer emitted by Trixie's binutils. Current ld, gprofng and gp-* tools
# remain available.
dwp
gold
ld.gold
aarch64-linux-gnu-dwp
aarch64-linux-gnu-gold
aarch64-linux-gnu-gp-archive
aarch64-linux-gnu-gp-collect-app
aarch64-linux-gnu-gp-display-html
aarch64-linux-gnu-gp-display-src
aarch64-linux-gnu-gp-display-text
aarch64-linux-gnu-gprofng
aarch64-linux-gnu-ld.gold
x86_64-linux-gnu-dwp
x86_64-linux-gnu-gold
x86_64-linux-gnu-gp-archive
x86_64-linux-gnu-gp-collect-app
x86_64-linux-gnu-gp-display-html
x86_64-linux-gnu-gp-display-src
x86_64-linux-gnu-gp-display-text
x86_64-linux-gnu-gprofng
x86_64-linux-gnu-ld.gold

# Commands removed from Trixie's util-linux/shadow packages. Block-device,
# filesystem, mount and login capabilities that still have Trixie packages are
# installed explicitly by naros-tier-agent; these obsolete interfaces are not.
addpart
cpgr
cppw
delpart
faillog
groupmems
last
lastb
lastlog
mesg
utmpdump

# Historical compatibility aliases; the canonical commands remain available.
md5sum.textutils
slogin