3 Commits

Author	SHA1	Message	Date
daniel	3909b1072c	Close the RSBK name-collision class: ASCII case folding, UTF-8 well-formedness, nested-path traversal ... All three are format-locked and validated on encode and decode. Repeated known keys now reject at the root and inside an entry rather than last-wins.	2026-08-02 17:19:29 -04:00
daniel	e0b4ec2e21	Tighten RSBK package-format validation for review remediation ... Reject NUL/control bytes and Windows-hostile names in entry names, relax the over-broad ".." substring ban to component-only, close the trailing-garbage gap on empty manifests, and relocate the package CMake subdirectory to its ladder home.	2026-08-02 17:19:29 -04:00
daniel	043558a54d	Land src/core/package: the pure RSBK container — format ladder, JSON manifest, framing/layout codec ... Two-integer ladder (formatVersion/minReaderVersion), bare-name-only entries validated on encode and decode, prefix decode that proves exact file size without ever reading a payload.	2026-08-02 17:19:29 -04:00