diff --git a/nulib/lib_provisioning/utils/settings.nu b/nulib/lib_provisioning/utils/settings.nu
index 508b99b..669a3ee 100644
--- a/nulib/lib_provisioning/utils/settings.nu
+++ b/nulib/lib_provisioning/utils/settings.nu
@@ -8,21 +8,27 @@
 #plugin rm "~/.local/bin/nu_plugin_nickel"
 #plugin add "~/.local/bin/nu_plugin_nickel"
 
-use ../config/accessor.nu *
-use ./logging.nu *
-use ./nickel_processor.nu *
-use ./error.nu [throw-error]
-use ./init.nu [get-provisioning-infra-path get-provisioning-name get-provisioning-resources]
+# Selective imports — absolute paths from nulib/ root (ADR-025 Phase 3 pilot).
+# Former star-imports (8) replaced with named-symbol imports to stop the root
+# lib_provisioning/mod.nu chain from propagating the full export graph.
+use lib_provisioning/config/accessor/core.nu [config-get]
+use lib_provisioning/context.nu [setup_user_context]
+use lib_provisioning/sops/lib.nu [is_sops_file decode_sops_file on_sops]
+use lib_provisioning/user/config.nu [get-workspace-default-infra get-workspace-path]
+use lib_provisioning/utils/error.nu [throw-error]
+use lib_provisioning/utils/init.nu [get-provisioning-infra-path get-provisioning-name get-provisioning-resources get-work-format]
+use lib_provisioning/utils/interface.nu [_ansi _print]
+use lib_provisioning/utils/logging.nu [is-debug-enabled]
+use lib_provisioning/utils/nickel_processor.nu [ncl-eval ncl-eval-soft process_nickel_export_raw]
+use lib_provisioning/workspace/detection.nu [detect-infra-from-pwd get-effective-workspace infer-workspace-from-pwd]
+# Cross-tree import (target is outside nulib/): extensions/ is the public API
+# consumed by workspaces. Relative path is unavoidable here.
+use ../../../../extensions/providers/prov_lib/middleware.nu [mw_create_cache mw_ip_from_cache]
 
 # Get default settings filename (Nickel format post-migration)
 def get-default-settings [] : nothing -> string {
     "settings.ncl"
 }
-use ../../../../extensions/providers/prov_lib/middleware.nu *
-use ../context.nu *
-use ../sops/mod.nu *
-use ../workspace/detection.nu *
-use ../user/config.nu *
 
 
 # No-op function for backward compatibility