[bhaskargurram-ai]

cargo deny check has failed on main since RustSec published RUSTSEC-2024-0449 on 2026-10-12, an "unmaintained" notice for unsafe-libyaml, which provio pulls in through serde_yaml 0.9. It's a required check, so it blocks every PR.

This adds a scoped ignore for that one advisory, with the reason and a link to #53, which tracks moving off serde_yaml. The notice isn't a vulnerability and has no patched version. Nothing else in deny.toml changes.

I checked Cargo.lock against the current advisory database: this is the only advisory that affects provio's 323 registry dependencies.

🤖 Generated with Claude Code

https://claude.ai/code/session_017bQP5nwJVPMXqMhewzhQv5

---

Generated by Claude Code

[github-actions]

proofcheck: ⚠️ No evidence found for the PR's claims

no checkable claims in the PR text · no tests added or changed · 1 files (+6/−1)

Claims

No checkable claims (issue references, performance numbers, "adds tests", "no behaviour change", "backwards compatible") were found in the PR title or description.

Tests: do the changed tests fail before the change and pass after it?

⚠️ No test evidence: this PR does not add or change any test.

Projects: rust (cargo): no tests changed · python (pytest in adapters/python): no tests changed

• The PR does not add or modify any test files.

Scope

• 1 files changed (+6 / −1 lines)

---

_{proofcheck judges evidence, not authorship: it runs the PR's tests on the base and head commits, replays issue reproducers and checks claims against what it measured. It does not guess whether a human or an AI wrote the code. ⚠️ means no evidence, not wrong. Base bde8846 → head 6b27b16 · proofcheck 1.0.0}