Explanation

Background for decisions that look arbitrary until you know why.

• Index vs. catalog — what an index is, what this package is, and which surfaces each one owns.
• Multi-source model — how aggregation works, and how index-qualified routes keep every source's packages listed.
• Security and trust model — why HTTPS is mandatory, why redirects are refused, and what the emitted headers sandbox.