basically, we’d add validation (somewhere) that the constraints within transitive deps are always valid, and with an assumption that all targets actually have constraints (defaulting to the repo’s constraints). with that validation in place, you only need to look at roots.