Repository navigation
4.0.6 — binary detection and derived layer names
4.0.6
A NUL byte past the first 8 KB. Binary detection sampled 8 KB, so a file with a NUL at byte 9000 was emitted as text into a part. The whole file is scanned now, up to 8 MB, in 64 KB chunks. Verified: a 20 KB file with one NUL at offset 9000 is skipped as binary.
Layer and kind names masked wherever they are derived. Masking config.layers was not enough — the derived values were raw across eleven sinks: manifest.layers keys, files[].layer, part headers, the README parts table, the audit layer table, navigation, report and config.budgets.byLayer keys. The name is now masked where it is assigned, so every derived field inherits it. Verified with a credential-shaped layer name: zero occurrences in any artifact.