diff --git a/nulib/lib_provisioning/diagnostics/health_check.nu b/nulib/lib_provisioning/diagnostics/health_check.nu
index a6308aa..d1e3e7a 100644
--- a/nulib/lib_provisioning/diagnostics/health_check.nu
+++ b/nulib/lib_provisioning/diagnostics/health_check.nu
@@ -2,8 +2,9 @@
 # Deep health validation for provisioning platform configuration and state
 
 use std log
-use ../config/accessor.nu *
-use ../user/config.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+use lib_provisioning/config/accessor/core.nu [config-get]
+use lib_provisioning/user/config.nu [get-user-config-path load-user-config]
 
 # Check health of configuration files
 def check-config-files [] {
diff --git a/nulib/lib_provisioning/diagnostics/next_steps.nu b/nulib/lib_provisioning/diagnostics/next_steps.nu
index 6204166..cd264ad 100644
--- a/nulib/lib_provisioning/diagnostics/next_steps.nu
+++ b/nulib/lib_provisioning/diagnostics/next_steps.nu
@@ -2,8 +2,9 @@
 # Provides intelligent next-step suggestions based on current system state
 
 use std log
-use ../config/accessor.nu *
-use ../user/config.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# config/accessor star-import was dead — dropped.
+use lib_provisioning/user/config.nu [load-user-config]
 
 # Determine current deployment phase
 def get-deployment-phase [] {
diff --git a/nulib/lib_provisioning/extensions/discovery.nu b/nulib/lib_provisioning/extensions/discovery.nu
index ebb34da..7300757 100644
--- a/nulib/lib_provisioning/extensions/discovery.nu
+++ b/nulib/lib_provisioning/extensions/discovery.nu
@@ -5,9 +5,13 @@
 # Extension Discovery and Search
 # Discovers extensions across OCI registries, Gitea, and local sources
 
-use ../utils/logging.nu *
-use ../oci/client.nu *
-use versions.nu [is-semver, sort-by-semver, get-latest-version]
+# Selective imports (ADR-025 Phase 3 Layer 2).
+use lib_provisioning/utils/logging.nu [log-debug log-error log-info]
+use lib_provisioning/oci/client.nu [
+    get-oci-config is-oci-available load-oci-token oci-get-artifact-manifest
+    oci-get-artifact-tags oci-list-artifacts
+]
+use lib_provisioning/extensions/versions.nu [is-semver sort-by-semver get-latest-version]
 
 # Discover extensions in OCI registry
 export def discover-oci-extensions [
diff --git a/nulib/lib_provisioning/extensions/registry.nu b/nulib/lib_provisioning/extensions/registry.nu
index f59871f..c083078 100644
--- a/nulib/lib_provisioning/extensions/registry.nu
+++ b/nulib/lib_provisioning/extensions/registry.nu
@@ -1,8 +1,9 @@
 # Extension Registry
 # Manages registration and lookup of providers, taskservs, and hooks
 
-use ../config/accessor.nu *
-use loader.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# config/accessor star-import was dead — dropped.
+use lib_provisioning/extensions/loader.nu [discover-providers discover-taskservs]
 
 # Get default extension registry
 export def get-default-registry [] {
diff --git a/nulib/lib_provisioning/extensions/versions.nu b/nulib/lib_provisioning/extensions/versions.nu
index 504213a..a75f7ea 100644
--- a/nulib/lib_provisioning/extensions/versions.nu
+++ b/nulib/lib_provisioning/extensions/versions.nu
@@ -1,8 +1,11 @@
 # Extension Version Resolution
 # Resolves versions from OCI tags, Gitea releases, and local sources
 
-use ../utils/logging.nu *
-use ../oci/client.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+use lib_provisioning/utils/logging.nu [log-debug log-error]
+use lib_provisioning/oci/client.nu [
+    get-oci-config is-oci-available load-oci-token oci-get-artifact-tags
+]
 
 # Resolve version from version specification
 export def resolve-version [
diff --git a/nulib/lib_provisioning/packaging.nu b/nulib/lib_provisioning/packaging.nu
index d6d82b6..a0f71c0 100644
--- a/nulib/lib_provisioning/packaging.nu
+++ b/nulib/lib_provisioning/packaging.nu
@@ -3,8 +3,9 @@
 # Author: JesusPerezLorenzo
 # Date: 2025-09-29
 
-use config/accessor.nu *
-use utils *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# utils/ star-import was dead — dropped.
+use lib_provisioning/config/accessor/core.nu [get-config]
 
 # Package core provisioning Nickel schemas
 export def "pack-core" [
diff --git a/nulib/lib_provisioning/sops/lib.nu b/nulib/lib_provisioning/sops/lib.nu
index cbff70e..c1df0f7 100644
--- a/nulib/lib_provisioning/sops/lib.nu
+++ b/nulib/lib_provisioning/sops/lib.nu
@@ -1,8 +1,9 @@
 
 use std
-use ../config/accessor.nu *
-use ../utils/interface.nu *
-use ../utils/init.nu [get-provisioning-use-sops, get-workspace-path, get-provisioning-infra-path]
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# config/accessor star-import was dead — dropped.
+use lib_provisioning/utils/interface.nu [_ansi _print]
+use lib_provisioning/utils/init.nu [get-provisioning-use-sops get-workspace-path get-provisioning-infra-path]
 
 def find_file [
     start_path: string