diff --git a/nulib/lib_provisioning/config/cache/commands.nu b/nulib/lib_provisioning/config/cache/commands.nu
index cb1e7ea..a4cff47 100644
--- a/nulib/lib_provisioning/config/cache/commands.nu
+++ b/nulib/lib_provisioning/config/cache/commands.nu
@@ -2,8 +2,9 @@
 # Provides user-facing commands for cache operations and configuration
 # Follows Nushell 0.109.0+ guidelines
 
-use ./core.nu *
-use ./metadata.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# cache/metadata star-import was dead — dropped.
+use lib_provisioning/config/cache/core.nu [cache-clear-type get-cache-stats]
 # Avoid importing all modules - use only what's needed
 # use ./config_manager.nu *
 # use ./nickel.nu *
diff --git a/nulib/lib_provisioning/config/cache/final.nu b/nulib/lib_provisioning/config/cache/final.nu
index 65e67f3..948aef0 100644
--- a/nulib/lib_provisioning/config/cache/final.nu
+++ b/nulib/lib_provisioning/config/cache/final.nu
@@ -4,8 +4,9 @@
 # TTL: 5 minutes (short for safety - workspace configs can change)
 # Follows Nushell 0.109.0+ guidelines
 
-use ./core.nu *
-use ./metadata.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# cache/metadata star-import was dead — dropped.
+use lib_provisioning/config/cache/core.nu [cache-clear-type cache-lookup cache-write]
 
 # Helper: Generate cache key for workspace + environment combination
 def compute-final-config-key [
diff --git a/nulib/lib_provisioning/config/cache/mod.nu b/nulib/lib_provisioning/config/cache/mod.nu
index 2d7ba47..0c6e73d 100644
--- a/nulib/lib_provisioning/config/cache/mod.nu
+++ b/nulib/lib_provisioning/config/cache/mod.nu
@@ -2,8 +2,9 @@
 # Avoids complex re-export patterns that cause Nushell 0.110.0 parser issues
 
 # Import core only - other modules import their dependencies directly
-use ./core.nu *
-use ./metadata.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# cache/metadata star-import was dead — dropped.
+use lib_provisioning/config/cache/core.nu [get-cache-stats]
 
 # Helper: Initialize cache system
 export def init-cache-system [] {
diff --git a/nulib/lib_provisioning/config/cache/sops.nu b/nulib/lib_provisioning/config/cache/sops.nu
index c3f5a41..46b7df6 100644
--- a/nulib/lib_provisioning/config/cache/sops.nu
+++ b/nulib/lib_provisioning/config/cache/sops.nu
@@ -4,8 +4,9 @@
 # TTL: 15 minutes (configurable, balances security and performance)
 # Follows Nushell 0.109.0+ guidelines
 
-use ./core.nu *
-use ./metadata.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# cache/metadata star-import was dead — dropped.
+use lib_provisioning/config/cache/core.nu [cache-clear-type cache-lookup cache-write]
 
 # Helper: Compute hash of SOPS file path
 def compute-sops-hash [file_path: string] {
diff --git a/nulib/lib_provisioning/config/commands.nu b/nulib/lib_provisioning/config/commands.nu
index ad164d0..02caf85 100644
--- a/nulib/lib_provisioning/config/commands.nu
+++ b/nulib/lib_provisioning/config/commands.nu
@@ -1,8 +1,13 @@
 # Configuration Encryption CLI Commands
 # Provides user-friendly commands for config encryption operations
 
-use encryption.nu *
-use accessor.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# config/accessor star-import was dead — dropped.
+use lib_provisioning/config/encryption.nu [
+    contains-sensitive-data decrypt-config edit-encrypted-config
+    encrypt-config encrypt-sensitive-configs is-encrypted-config
+    rotate-encryption-keys scan-unencrypted-configs validate-encryption-config
+]
 
 # Encrypt a configuration file
 export def "config encrypt" [
diff --git a/nulib/lib_provisioning/utils/error.nu b/nulib/lib_provisioning/utils/error.nu
index 27a220d..8ca1315 100644
--- a/nulib/lib_provisioning/utils/error.nu
+++ b/nulib/lib_provisioning/utils/error.nu
@@ -2,9 +2,10 @@
 # Purpose: Centralized error handling, error messages, and exception management.
 # Dependencies: logging
 
-use ../config/accessor.nu *
-use ./logging.nu *
-use ./interface.nu [_ansi]
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# config/accessor star-import was dead — dropped.
+use lib_provisioning/utils/logging.nu [is-debug-enabled is-metadata-enabled]
+use lib_provisioning/utils/interface.nu [_ansi]
 
 export def throw-error [
     error: string
diff --git a/nulib/lib_provisioning/utils/templates.nu b/nulib/lib_provisioning/utils/templates.nu
index 9270c89..eebaf4d 100644
--- a/nulib/lib_provisioning/utils/templates.nu
+++ b/nulib/lib_provisioning/utils/templates.nu
@@ -1,5 +1,6 @@
-use ../config/accessor.nu *
-use ./logging.nu *
+# Selective imports (ADR-025 Phase 3 Layer 2).
+# config/accessor star-import was dead — dropped.
+use lib_provisioning/utils/logging.nu [is-debug-enabled]
 
 export def run_from_template [
   template_path: string  # Template path