# The C1 resource-in-community invariant is sealed by the type system, with one
# lint-guarded escape hatch. `src/routes/scope.rs` is the canonical account of
# why the seal exists and what it replaced; this file only says what the lint
# entry below is for.
#
# `Unscoped::into_inner_unchecked` unwraps with no community check, for callers
# that have no slug to scope against (the trusted internal server-to-server API).
# It is disallowed below so a `/p/{slug}/…` handler cannot reach for it by
# accident; the one sanctioned site, in `src/routes/internal.rs`, carries a local
# `#[allow]`. It is the only lint entry because it is the only unchecked-unwrap
# primitive: everything else is enforced by the type.
disallowed-methods = [
    { path = "mt_db::queries::Unscoped::into_inner_unchecked", reason = "unwraps a community resource without the C1 scope check; a slug-scoped handler must use Unscoped::in_community via routes::scope::CommunityScope instead" },
]