commit log
- security: harden rustls ffi buffers 3bb53cf Jaime Fournier
- security: harden tls ffi buffers 7e2f9de Jaime Fournier
- security: harden crypto ffi outputs a073b52 Jaime Fournier
- security: harden regex facade ffi outputs 2d02ca9 Jaime Fournier
- security: harden compression ffi outputs 403629a Jaime Fournier
- security: harden regex-native ffi outputs c4a76c0 Jaime Fournier
- security: harden exec-id ffi path handling d5e1f3c Jaime Fournier
- docs: clarify capsicum worker limitation b3e3c6a Jaime Fournier
- security: clean retired sandbox scan ddfb504 Jaime Fournier
- ci: add platform sandbox parity smoke 5f6db3d Jaime Fournier
- security: harden legacy seatbelt diagnostics 5aff6bb Jaime Fournier
- security: harden seatbelt error buffer handling b00af3e Jaime Fournier
- security: add seatbelt path exec worker profile 90786ed Jaime Fournier
- ci: run fuzz smoke and scheduled deep fuzz 2722d21 Jaime Fournier
- security: add worker capsicum helper hook e046f64 Jaime Fournier
- security: add macos worker seatbelt profiles c2a59a9 Jaime Fournier
- docs: clarify remaining security gaps f2792a7 Jaime Fournier
- security: add worker landlock pre-exec setup 6cf2548 Jaime Fournier
- docs: consolidate language repository index 4f5bc2e Jaime Fournier
- security: close blocking ffi collect-safe audit 6240d9d Jaime Fournier
- security: finish native unsafe invariant documentation b10f978 Jaime Fournier
- security: document x509 postgres epoll unsafe invariants f5a4ce4 Jaime Fournier
- security: document inotify process socks unsafe invariants 90c980a Jaime Fournier
- security: document wasm landlock aproc unsafe invariants 6be6f8a Jaime Fournier
- security: document spidermonkey wasm unsafe invariants c617c8a Jaime Fournier
- security: harden tls ffi 1d6dd8f Jaime Fournier
- security: document secure filesystem ffi 9f6c2af Jaime Fournier
- security: harden sqlite ffi 21150d9 Jaime Fournier
- security: harden spidermonkey wasm ffi 0d6ee9f Jaime Fournier
- security: harden x509 ffi 620e7dc Jaime Fournier
- security: harden duckdb ffi 69150f4 Jaime Fournier
- security: harden wasm ffi aec9541 Jaime Fournier
- security: harden landlock ffi 91a0c85 Jaime Fournier
- security: harden postgres ffi ef643e9 Jaime Fournier
- security: harden socks5 ffi e5951bc Jaime Fournier
- security: harden antidebug ffi c99852d Jaime Fournier
- security: harden epoll ffi 36fa5ca Jaime Fournier
- security: harden inotify ffi f3d00fe Jaime Fournier
- security: harden pcap ffi e56785f Jaime Fournier
- security: annotate process control ffi c5f63d4 Jaime Fournier
- security: harden regex native ffi 5271f35 Jaime Fournier
- security: harden integrity ffi 405305e Jaime Fournier
- security: harden embed crypto ffi c9781bc Jaime Fournier
- security: harden http ffi boundary 8e262bf Jaime Fournier
- docs: consolidate repository documentation map b01db1b Jaime Fournier
- security: harden compression ffi buffers 449b638 Jaime Fournier
- security: harden key agreement ffi buffers 2976cc0 Jaime Fournier
- security: annotate secure memory unsafe sites df2f9c5 Jaime Fournier
- security: harden crypto ffi buffers 4c21d5c Jaime Fournier
- security: annotate worker native unsafe sites 0f9bf57 Jaime Fournier