Review the part.
Keep the keys.

Human approval binds exact bytes.

A trusted maintainer reviews the source, declared capabilities and test evidence for one immutable commit, subtree and package digest. The approval also binds the manifest and audit hashes. A new version starts a new review.

Human audited is a record, not a guarantee.

Reviewed software can still contain defects. Requests are declarations, not a sandbox. Depot does not grant filesystem access, network rights, credentials, publication, account changes or spending authority.

Staging runs nothing.

The client accepts a local mirror and an independently trusted catalog fingerprint. It validates the archive, stages regular files without execute permission, and writes a private receipt. Adding source to a System, building, running and deploying remain separate decisions. There is no install hook, remote execution, automatic update or telemetry.

Submissions stay outside the catalog.

Static preflight enumerates immutable Git blobs without running package code. Tests for untrusted submissions belong in isolated CI with no secrets. Only an explicit local maintainer approval record permits catalog generation. Peer metadata and claimed approvals cannot authorize release.

The first real shelf is still empty.

Real Paste Inbox is reserved for package #0001. Its source license, exact release and human approval remain outstanding. Synthetic fixtures demonstrate the pipeline and carry no human-audited badge.