no-runtime-code

Guardrails to keep the pipeline pure: specs + SEA + generators only.