Ah, I didn't even think that far, I stopped at any REPL being a violation since it's running code which was not packaged with the app.