How can you ensure that the modules follow these rules? [...] As a proof of concept, I’ve created a Node.js library called firewall-js using JavaScript proxies.

Unless I misunderstand, there's a vastly simpler way to do this:

- use a monorepo;

- put each module in its own package.