I disagree with how this conflates layers and spheres of responsibility The package manager fetches dependencies recursively into your chosen directory running

I disagree with how this conflates layers and spheres of responsibility The package manager fetches dependencies recursively into your chosen directory running as your choose account. The runtime executes with your chosen account with whatever permissions have been granted. Now having the runtime track whether the caller of a library is another library or your application. Or for the runtime to allow reject runtime api seems better left to the os to control with container, sandbox or transitional ACL