<godepcop>
  <!-- The packages under v23 are the public Vanadium API and are widely used.

       Maintain a strict rule that v23 only imports from v23, to avoid painful
       circular dependencies. -->
  <pkg allow="v.io/v23/..."/>
  <pkg deny="..."/>

  <!-- Relax the rule for external tests, but keep a curated list rather than
       allowing a blanket "..." to avoid adding unwanted dependencies. -->
  <xtest allow="github.com/cosnicolaou/llog"/>
  <xtest allow="github.com/gorilla/websocket"/>
  <xtest allow="github.com/paypal/gatt/..."/>
  <xtest allow="github.com/pborman/uuid"/>
  <xtest allow="github.com/presotto/go-mdns-sd/..."/>
  <xtest allow="github.com/shirou/gopsutil/..."/>
  <xtest allow="golang.org/x/crypto/..."/>
  <xtest allow="golang.org/x/net/context/..."/>
  <xtest allow="golang.org/x/net/internal/timeseries/..."/>
  <xtest allow="golang.org/x/net/trace/..."/>
  <xtest allow="v.io/x/lib/..."/>
  <xtest allow="v.io/x/ref/..."/>
</godepcop>