keystead-core 0.4.2

Patch release on top of 0.4.1.

Changes

• Shrink the vault fingerprint from 128 to 64 bits. File format version becomes 3 and the derivation label becomes keystead-vault-fingerprint-v3; old v2 vaults are rejected cleanly (no migration, per the active-development no-compat stance).
• Rewrite and expand the vault documentation: concept-first explanation of envelope encryption, the plaintext header and encrypted envelope, the container body and its two encryption levels, key slots, and end-to-end device/recovery key flows.
• Resolve IDE null-analysis warnings by adding non-null accessors (KeySlot.requireKdfParameters(), NativeMemoryProtectionReport.requireResult()) for values already guaranteed non-null by upstream guards. No behavior change.

Consuming

Maven Central coordinates (syncing shortly):
top.focess:keystead-core:0.4.2