# Parity-sweep allowlist (os/tests/parity-sweep.sh): names present in the reference # image (nucleic-sandbox:v7, FROM node:22-bookworm-slim) that naros-agent deliberately # does not carry. One name per line; every entry needs a "why". # node:22 image plumbing, not a tool agents use. docker-entrypoint.sh # The node:22 image ships node under /usr/local with npx/corepack symlinked there; # NodeSource's deb provides the same commands at /usr/bin — same names, so only # image-internal helper names should ever land here, not node/npm/npx/corepack. # bookworm→trixie package renames/drops surface here as they are DISCOVERED and # understood in CI — do not pre-seed guesses.