v0.51.0

A line over a picture can be redacted, pixels and all

On ops v0.35.0: a
redaction across a picture now destroys the picture's own samples and
writes the picture back, as ISO 32000-1 §12.5.6.23 requires — "clipping or
image masks shall not be used to hide that data".

For a reader of scanned paper that refusal was everything. A scan is one
picture across the whole page, so "across an image" met every selection they
ever made, and the only thing left to do with it was the black rectangle this
verb exists to stop them drawing.

The pictures ops still cannot rewrite — a JPEG, a turned one, one drawn twice,
one carrying a mask — are refused by name, with the reason, which is the
part a reader can act on.

⛔ A redacted page looks the same whether this worked or not: the region is
painted afterwards either way. So the new test reads the samples back out of
the saved file rather than off the screen, on a picture of two rows of
different greys with the line drawn across the lower one — the row the words
sit on must come back zero, the row forty points above it must come back as it
went in.

[2026-11-09]

🤖 Generated with Claude Code