Metadata-only external package-manager candidate; no installer or migrated code exists. Read AGENTS and TODO.
Prerequisite: W-72 / bitty-docs CTX-0261, Issue #401. Runtime still validates installed integrity, compatibility and grants. Preserve no-install-code, transaction, rollback and supply-chain controls.
CTX-0001 -> CTX-0002 -> CTX-0003 -> CTX-0004 maps to Issues #4 -> #3 -> #2 -> #1. CTX-0001 (bootstrap) is complete: metadata gates, independent review, first publication, redacted CarryCtx snapshot and branch protection are recorded. No product implementation is authorized; CTX-0002 waits on its accepted contract.