# Scutarius archive always wins (by Release Label). With the merged view this
# is belt and braces: the view already applies precedence + bans server-side.
Package: *
Pin: release l=Scutarius
Pin-Priority: 1001

# BLOCKLIST -- design-goal enforcement (build-plan sec.3, decisions threat
# model). -1 = apt never selects it, not manually, not as a dependency.
Package: snapd snap-confine ubuntu-advantage-tools flatpak
Pin: release *
Pin-Priority: -1

# NO UPSTREAM KERNELS: Scutarius kernels only (flavours scutarius-arm64 and
# gb10, from our archive). The merged Devuan archive carries Origin Devuan
# for both its own and the Debian pass-through packages (measured
# 2026-08-22). linux-libc-dev is deliberately NOT banned (build chroots).
Package: linux-image-* linux-headers-* linux-kbuild-* linux-modules-* linux-binary-*
Pin: release o=Devuan
Pin-Priority: -1
