Hard-blocks dependency additions, bumps, and downgrades until a fresh, source-cited version check is recorded via WebSearch. Supports npm, pip, Cargo, and NuGet ecosystems. Uses PreToolUse hooks to intercept manifest edits and install commands, blocking them until the developer verifies the latest version upstream.