pub fn software_allowlist() -> Vec<SourceAllowlist>Expand description
Always-compiled allowlist for software citations (#614, ADR-0058):
doiget cite / verify on a GitHub repository or release URL. Kept out
of tier_1_allowlist because it is not a fetch source – a fetch
plan’s source list is read from that one, and GitHub must never appear
in it. Only the CLI registers it; no MCP tool cites a URL.