diff --git a/Cargo.lock b/Cargo.lock
index 91c7e4a..997f3cc 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4332,9 +4332,14 @@ name = "kebab-nli"
 version = "0.17.2"
 dependencies = [
  "anyhow",
+ "hf-hub",
  "kebab-config",
+ "ndarray",
+ "ort",
  "serde",
  "tempfile",
+ "tokenizers",
+ "tracing",
 ]
 
 [[package]]
diff --git a/crates/kebab-nli/Cargo.toml b/crates/kebab-nli/Cargo.toml
index 7336062..5e52ae1 100644
--- a/crates/kebab-nli/Cargo.toml
+++ b/crates/kebab-nli/Cargo.toml
@@ -8,13 +8,17 @@ repository    = { workspace = true }
 description   = "fb-41: NLI-based post-synthesis verification (XNLI mDeBERTa-v3). PR-9a = trait + scaffolding; ONNX inference lands in PR-9b."
 
 [dependencies]
-# PR-9a scope: kebab-config for the OnnxNliVerifier::new(&Config) signature
-# the rag crate will call once PR-9d wires verification into ask_multi_hop.
-# ort / tokenizers / hf-hub / ndarray are intentionally NOT depended on here
-# — they sit in workspace.dependencies until PR-9b adds the real adapter.
+# PR-9b: ONNX inference path activated. ort / tokenizers / hf-hub / ndarray
+# all source from `[workspace.dependencies]` so the workspace pins a single
+# version + feature set for the whole NLI + embed stack.
 kebab-config = { path = "../kebab-config" }
 anyhow       = { workspace = true }
 serde        = { workspace = true }
+ort          = { workspace = true }
+tokenizers   = { workspace = true }
+hf-hub       = { workspace = true }
+ndarray      = { workspace = true }
+tracing      = { workspace = true }
 
 [dev-dependencies]
 tempfile     = { workspace = true }