v0.0.50

• maul-conventions.md: one rule for state a caller holds (#119). Opaque state the library alone writes is checked by its cookie, its ABI version where it records one, and every index, slot and length being in bounds; a forged one is outside the contract. A value struct with documented fields that a call takes back from the caller carries no raw pointer and size into the library's data, but names what it came from and an index, checked on each call. Caller memory a call keeps "as checked" is read only within the extents recorded. A library's value struct that breaks this is a bug for it to fix, with ! before 1.0.

Each library takes the page by syncing to this tag. No script or workflow changed since v0.0.49.