v0.0.2

Added

• (object) dictionary-mode objects to bound shape-tree growth (MEM-3)
• (limits) add configurable Limits; migrate caps to read from Realm
• (math) drop fixed Math.random seed; entropy-mix the fallback
• (math) seed Math.random from purecrypto's OS CSPRNG
• (math) back Math.random with xorshift128+ (was xorshift64)

Fixed

• (wasm) configurable limits, fuel metering, multi-byte blocktype (WASM-6/7/9)
• (nbvm) collect subject chars once in regex match/split loops (RE-7)
• (regex) collect subject chars once per match/replace/split loop (RE-7)
• (rng) don't let OsRng panic abort Interp::new; fall back to entropy mix (RNG-1)
• (bigint) cap asUintN/asIntN/** bit-size to prevent allocation bomb (MEM-6)
• (regex) tighten backtracking budget + share it across starts; add char-slice match API (RE-8, RE-7)
• (regex) avoid exponential compile-time blowup for nested unbounded quantifiers (RE-9)
• (nbvm) cap repeat + guard compiler register overflow (NBVM-1/NBVM-2)
• (flatbc) read untrusted program via fs::read, drop mmap (VM-9)
• (bytecode) verify untrusted load paths, bound allocs, drop mmap (VM-7/8/9)
• (snapshot) SNAP-3 read snapshot file instead of mmap (SIGBUS hazard)
• (wasm) use checked_add for element-segment slot index (WASM-8)
• (heap) clamp free-path generation below compaction range (MEM-4)
• (parser) guard recursion in parse_new/parse_exponent/parse_class (PARSE-2/3/4)
• (date) parse_iso_date panics on malformed/non-ASCII input (EXEC-7)
• (lint) satisfy clippy + rustdoc + rustfmt gates

Other

• (limits) end-to-end config-override regression test
• (snapshot) validate restored func_id against a recorded bound (SNAP-2)