LPK-E0402 — release without exact dependencies (descriptor 0.1)

What it means

Not triggerable in a hermetic recipe.

This refusal needs a registry serving an old-format descriptor from before exact dependencies were mandatory. Building that registry needs real published releases with valid content hashes, which no hermetic recipe can plant. If you meet the code in real output, read it as “this old release predates exact pins” and move to a newer release of the same package.