From bf52fceea048d4b2bdfb2b0489fad8b2f155c7fe Mon Sep 17 00:00:00 2001
From: claw <claw@weiker.me>
Date: Wed, 13 May 2026 02:56:06 -0700
Subject: [PATCH] docs(deps): update CONVENTIONS.md allowlist for go-yaml

Update the approved dependency table to document go-yaml subpackage
usage (ast, parser) and remove the deviation comment now that the
proper allowlist process is being followed.

Closes #91
---
 CONVENTIONS.md | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/CONVENTIONS.md b/CONVENTIONS.md
index a460d70..d055514 100644
--- a/CONVENTIONS.md
+++ b/CONVENTIONS.md
@@ -9,7 +9,7 @@
 
 | Package | Use Case | Scope |
 |---------|----------|-------|
-| `github.com/goccy/go-yaml` | YAML parsing (persona files, config) | production |
+| `github.com/goccy/go-yaml` | YAML parsing and AST inspection (subpkgs: `ast`, `parser`) | production |
 | `github.com/google/go-cmp` | Test comparisons (`cmp.Diff`) | test only |
 
 **Any import not in this table or the Go standard library is forbidden.**
@@ -21,8 +21,6 @@ To request a new dependency:
 2. Requires explicit approval from Aaron
 3. After merge, a separate PR may use the package
 
-<!-- Deviation from step 1+3 for go-yaml migration: see #91 for rationale. -->
-
 *Enforcement: `scripts/check-deps.sh` parses this table — update only here.*
 
 ## Error Handling