sgl-router: experimental Rust HTTP router for SGLang worker pools (#25851)

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

experimental/sgl-router/deny.toml

@@ -0,0 +1,75 @@
+[graph]
+all-features = true
+
+[advisories]
+yanked = "warn"
+# Unmaintained advisories are demoted to warnings: the affected crates
+# (unic-*, paste, number_prefix) are all transitive through dynamo-parsers
+# and have no available upgrades.  They pose no security risk; revisit
+# if/when dynamo-parsers feature-flags rustpython-parser off upstream.
+unmaintained = "none"
+# `ignore` left empty — we want to be notified of new CVEs.
+ignore = []
+
+[licenses]
+allow = [
+    "Apache-2.0",
+    "Apache-2.0 WITH LLVM-exception",
+    "MIT",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "ISC",
+    "Unicode-DFS-2016",
+    "Unicode-3.0",
+    "Zlib",
+    "CC0-1.0",
+    "MPL-2.0",
+    # Both added per the initial license review:
+    "NCSA",                 # libfuzzer-sys (transitive via rav1e) — BSD-equivalent permissive.
+    "CDLA-Permissive-2.0",  # webpki-roots — Linux Foundation permissive license.
+]
+confidence-threshold = 0.93
+
+# LGPL-3.0-only is accepted on a per-crate exception basis. Rationale:
+# - sgl-router is Apache-2.0 and ships full source on the public sglang
+#   repo, so the LGPL "users must be able to relink" requirement is
+#   satisfied by the conventional Rust-ecosystem interpretation (anyone
+#   can git-clone the repo, bump a malachite version, rebuild).
+# - The malachite-* crates are pure-Rust arbitrary-precision math, used
+#   four levels deep through dynamo-parsers → rustpython-parser → malachite-bigint.
+#   They are NOT on the routing hot path; dynamo-parsers is only wired
+#   into chat-completions for tool-call parsing.
+# - Revisit if/when: (a) a regulated-enterprise customer objects, or
+#   (b) dynamo-parsers feature-flags rustpython-parser off upstream.
+[[licenses.exceptions]]
+name = "malachite"
+allow = ["LGPL-3.0-only"]
+
+[[licenses.exceptions]]
+name = "malachite-base"
+allow = ["LGPL-3.0-only"]
+
+[[licenses.exceptions]]
+name = "malachite-nz"
+allow = ["LGPL-3.0-only"]
+
+[[licenses.exceptions]]
+name = "malachite-q"
+allow = ["LGPL-3.0-only"]
+
+[[licenses.exceptions]]
+name = "malachite-bigint"
+allow = ["LGPL-3.0-only"]
+
+[bans]
+multiple-versions = "warn"
+wildcards = "deny"
+# Git deps (e.g. dynamo-* pinned by SHA) have no semver version req and would
+# otherwise trip the wildcard check.  allow-wildcard-paths exempts non-registry
+# (git + path) sources so we only deny bare '*' on crates.io deps.
+allow-wildcard-paths = true
+
+[sources]
+unknown-registry = "deny"
+unknown-git = "allow"  # dynamo git dep pinned by SHA in Cargo.toml.
+allow-git = ["https://github.com/ai-dynamo/dynamo"]