Triage what the audit log has surfaced, then approve via the configured proposer. Each "Add to registry…" click runs through the same path as lex-align-client request-approval — opening a PR, committing to a local repo, or writing the YAML directly, depending on REGISTRY_PROPOSER. The server hot-reloads on merge / write.

Global policies

Registry version

CVE threshold (0.0 – 1.0)

Unknown license policy

Auto-approve licenses (comma-separated)

Hard-ban licenses (comma-separated)

Require human review (comma-separated)

Pending approval requests0 — packages developers asked for that aren't in the registry yet

Package	Latest rationale	Requests	Last requested

Implicit candidates0 — packages your audit log has seen but no one filed an approval for

Package	Why it's pending	Activity	Last seen

Name ↕	Status ↕	Replacement	Version constraint	Reason

{{ title }}

Edit package