diff --git a/docs/design/INDEX.md b/docs/design/INDEX.md
index 79398b4..247299f 100644
--- a/docs/design/INDEX.md
+++ b/docs/design/INDEX.md
@@ -66,13 +66,15 @@ source of truth — not session memory.
   boundary (C3) therefore **transposes** these AoS records into aura's SoA
   columns (C7) and normalizes `time_ms` → canonical epoch-ns at that one
   boundary. Pulled in as a cargo git dependency by the **`aura-ingest`** crate
-  (cycle 0011) — the ingestion edge and the workspace's **external-dependency
-  firewall**: `aura-ingest` is the *only* crate that links `data-server` (hence
-  its transitive `chrono`/`regex`/`zip`), so the engine crates (`aura-core` /
-  `aura-std` / `aura-engine` / `aura-cli`) and the frozen deploy artifact (C13)
-  stay external-dependency-free. Consequence: `cargo build/test --workspace` now
-  resolves from a populated cargo cache (one Gitea fetch) rather than fully
-  offline.
+  (cycle 0011) — the **data-source ingestion edge**, where the `data-server`
+  external tree (and its transitive `chrono`/`regex`/`zip`) enters the workspace.
+  Under the amended C16 **per-case dependency policy** (cycle 0029), `aura-ingest`
+  is no longer a zero-dep *firewall* for the rest: the engine crates link
+  standard vetted crates where they earn their place (e.g. `serde`/`serde_json`
+  for the run registry, cycle 0029), with particular scrutiny for the frozen
+  deploy artifact (C13). Consequence: `cargo build/test --workspace` resolves
+  from a populated cargo cache (a Gitea fetch for `data-server` + crates.io for
+  the standard crates) rather than fully offline.
 - **RustAst (`myc`)** — `~/dev/RustAst`, Gitea `Brummel/RustAst`
   (`http://192.168.178.103:3000/Brummel/RustAst.git`). The predecessor DSL attempt
   (Foundation): **a conceptual reference, never a dependency** — its DSL authoring