# Dependency Audit
Audited for version 0.1.0.
- `kcode-audio-transcribe`: in-memory WAV validation, chunk transcription, and
canonical transcript reconciliation using caller-configured providers.
- `rusqlite`: durable recording, progress, retry, and completed-transcript
state. The bundled SQLite feature makes the published library
self-contained.
- `tokio`: asynchronous retained-original writes, the automatic background
worker, and retry timing.
- `chrono`: caller-supplied recording times and durable timestamps.
- `sha2`: content identity for exact retained audio bytes.
- `serde` and `serde_json`: typed public status serialization and durable
dependency progress snapshots.
- `uuid`: stable recording and temporary-upload identifiers.
- `tracing`: bounded operational diagnostics without exposing audio or
transcript contents.
- `anyhow`: private persistence and worker error context.
The crate has no HTTP-server, multipart, application-framework, Kmap, Chatend,
credential-vault, or downstream memory-ingress dependency. Provider
credentials remain encapsulated in the caller-created clients owned by
`kcode-audio-transcribe`.