It also covers supply-chain policy as code — committing deny.toml, centralizing dependency versions in [workspace.dependencies] rather than pinning per member — and auxiliary tooling like cargo hack (feature-powerset checks) and cargo machete (unused-dependency pruning).

Out of scope: writing the tests themselves (unit/integration/proptest/criterion) belongs to rust-testing-quality; non-Rust CI pipelines are not covered.

Rust Tooling & CI/CD

Agent Workflow (MANDATORY)

Before ANY tooling/CI work, spawn 3 agents in parallel, one Agent call each with a name: