Building a (mostly) reliable research assistant

If you install software from a public package registry (npm, PyPI, Crates, etc.), every security decision that registry makes sits inside your trust boundary. You don&#x27;t run the infrastructure, you don&#x27;t set the publisher policies, you don&#x27;t decide what "verified" means, and whatever the registry (fails to) enforce travels straight into your build. This is a well-studied surface.…