# Dependency Audit
- `chrono`: typed UTC timestamps in provenance payloads.
- `kcode-kweb-db`: canonical `ObjectId` parsing and serialization only.
The crate has no async runtime, HTTP stack, serialization framework, database
handle, filesystem access, cryptographic key, or network dependency.