draft proposal on provenance-qualified dependencies