diff --git a/nulib/lib_provisioning/cache/agent.nu b/nulib/lib_provisioning/cache/agent.nu
index f77209f..edc9aac 100755
--- a/nulib/lib_provisioning/cache/agent.nu
+++ b/nulib/lib_provisioning/cache/agent.nu
@@ -3,10 +3,12 @@
 # Token-optimized agent for progressive version caching with infra-aware hierarchy
 # Usage: nu agent.nu <command> [args]
 
-use cache_manager.nu *
-use version_loader.nu *
-use grace_checker.nu *
-use batch_updater.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# version_loader and grace_checker star-imports were dead — dropped.
+use lib_provisioning/cache/cache_manager.nu [
+    clear-cache-system get-cached-version init-cache-system show-cache-status
+]
+use lib_provisioning/cache/batch_updater.nu [batch-update-cache sync-cache-from-sources]
 
 # Main agent entry point
 def main [
diff --git a/nulib/lib_provisioning/coredns/commands.nu b/nulib/lib_provisioning/coredns/commands.nu
index 0661a1c..9b5d7fb 100644
--- a/nulib/lib_provisioning/coredns/commands.nu
+++ b/nulib/lib_provisioning/coredns/commands.nu
@@ -1,11 +1,19 @@
 # CoreDNS CLI Commands
 # User-facing commands for DNS management
 
-use ../utils/log.nu *
-use ../config/loader.nu get-config
-use service.nu *
-use zones.nu *
-use corefile.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# ../utils/log.nu was a broken import (file does not exist) — removed.
+# ../utils/logging.nu star-import was dead — dropped.
+use lib_provisioning/config/loader.nu [get-config]
+use lib_provisioning/coredns/service.nu [
+    check-coredns-health get-coredns-status install-coredns reload-coredns
+    restart-coredns show-coredns-logs start-coredns stop-coredns
+]
+use lib_provisioning/coredns/zones.nu [
+    add-a-record add-aaaa-record add-cname-record add-mx-record add-txt-record
+    create-zone-file list-zone-records remove-record validate-zone-file
+]
+use lib_provisioning/coredns/corefile.nu [update-corefile validate-corefile]
 
 # DNS service status
 export def "dns status" [] {
diff --git a/nulib/lib_provisioning/extensions/commands.nu b/nulib/lib_provisioning/extensions/commands.nu
index a9bd372..f0a6a49 100644
--- a/nulib/lib_provisioning/extensions/commands.nu
+++ b/nulib/lib_provisioning/extensions/commands.nu
@@ -1,10 +1,11 @@
 # Extension Management CLI Commands
 
-use loader_oci.nu load-extension
-use cache.nu *
-use discovery.nu *
-use versions.nu *
-use ../utils/logging.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# cache.nu, versions.nu and utils/logging.nu star-imports were dead — dropped.
+use lib_provisioning/extensions/loader_oci.nu [load-extension]
+use lib_provisioning/extensions/discovery.nu [
+    discover-all-extensions get-extension-versions list-extensions search-extensions
+]
 
 # Load extension from any source
 export def "ext load" [
diff --git a/nulib/lib_provisioning/vm/cleanup_scheduler.nu b/nulib/lib_provisioning/vm/cleanup_scheduler.nu
index 7e6ba5f..c63435c 100644
--- a/nulib/lib_provisioning/vm/cleanup_scheduler.nu
+++ b/nulib/lib_provisioning/vm/cleanup_scheduler.nu
@@ -3,8 +3,14 @@
 # Manages automatic cleanup of expired temporary VMs.
 # Rule 1: Single purpose, Rule 4: Pure functions, Rule 5: Atomic operations
 
-use ./vm_persistence.nu *
-use ./lifecycle.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# vm/lifecycle.nu star-import was dead — dropped.
+# Note: line ~211 embeds a string template with `use lib_provisioning/vm/cleanup_scheduler.nu *`
+# (scheduler script written to disk at runtime) — NOT an actual import.
+use lib_provisioning/vm/vm_persistence.nu [
+    cleanup-expired-vms find-expired-vms get-vm-persistence-info
+    get-vm-time-to-cleanup
+]
 
 export def "start-cleanup-scheduler" [
     --check-interval-minutes: int = 60
diff --git a/nulib/lib_provisioning/vm/nested_provisioning.nu b/nulib/lib_provisioning/vm/nested_provisioning.nu
index 0176aa4..dd4b1d4 100644
--- a/nulib/lib_provisioning/vm/nested_provisioning.nu
+++ b/nulib/lib_provisioning/vm/nested_provisioning.nu
@@ -3,9 +3,10 @@
 # Support for nested VMs (VM → VM → Containers).
 # Rule 1: Single purpose, Rule 5: Atomic operations
 
-use ./lifecycle.nu *
-use ./volume_management.nu *
-use ./network_management.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+use lib_provisioning/vm/lifecycle.nu [vm-info]
+use lib_provisioning/vm/volume_management.nu [volume-attach volume-detach]
+use lib_provisioning/vm/network_management.nu [network-connect network-disconnect]
 
 export def "nested-vm-create" [
     name: string                                 # VM name
diff --git a/nulib/lib_provisioning/vm/vm_persistence.nu b/nulib/lib_provisioning/vm/vm_persistence.nu
index 7820ea1..75417b7 100644
--- a/nulib/lib_provisioning/vm/vm_persistence.nu
+++ b/nulib/lib_provisioning/vm/vm_persistence.nu
@@ -4,9 +4,10 @@
 # Rule 1: Single purpose, Rule 4: Pure functions, Rule 5: Atomic operations
 # Error handling: Result pattern (hybrid, do/complete for bash operations)
 
-use ../result.nu *
-use ./persistence.nu *
-use ./lifecycle.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# vm/persistence.nu star-import was dead — dropped.
+use lib_provisioning/result.nu [err is-err json-read json-write map match-result]
+use lib_provisioning/vm/lifecycle.nu [vm-delete]
 
 export def "register-permanent-vm" [
     vm_config: record             # VM configuration