v0.0.51

• maul-conventions.md: the rule on state a caller holds (v0.0.50) gains one exception (#120). A struct the header also documents as caller-built input may point into the library's data, provided the call that takes it reads through it as through any buffer argument: only within the ranges its own pointers and counts state, checking every value it reads there as untrusted, and relying on nothing the library validated earlier. A header line alone exempts nothing.

Each library takes the page by syncing to this tag. No script or workflow changed since v0.0.49.