Bounded XLSB profiles
FormulaFence now accepts .xlsb only through formulafence profile.
- The reader uses strict BIFF12 record framing, bounded core package reads, and a verified formula-token subset. It never evaluates formulas or macros.
- JSON and Markdown declare
xlsb_core_profilescope and formula-token coverage. Cell values, formula text, defined-name labels, and definition bodies remain out of the profile. lint,diff,check, andportfoliocontinue to reject.xlsb; the public lint, comparison, and impact APIs also reject a narrowed profile snapshot.
Validation includes 1,584 tests, deterministic malformed-input sweeps, a public XLSB fixture replay, package checks, and a fresh-wheel profile smoke test. See the validation notes in the source tree for the precise boundary and corpus results.