Use the retained official Seroval 1.7.3 metadata for a one-node lock update and exact override. Preserve Solid 1.9.17, plugins 1.6.8, the optional WASI representation and all grouped migration dispositions. Limit graph admission to this exact consumer/range/plugin/root tuple, with adverse cases for future and nested copies, and retain normal-suite real Solid consumer controls. Acquisition, fresh-launch exact graph compatibility/build/browser proof and the existing full hosted audit are still required before this candidate can be accepted.
Change-source: pulse-maintainer
Bind the existing qualified security override to its exact consumer and serializer pair instead of letting npm overrides silently carry it into a newer Solid runtime. Resolve nested lock edges, retain the strict complete audit and security floors, and cover the two stale dependencies actually present in PR 2759 with positive, partial-repair and nested-resolution controls.
Change-source: pulse-maintainer
