DNS reconnaissance and asset discovery tool for security researchers

Minimal zero-dependency DNS wire-format client for Go — CAA, rcodes, EDE, AD bit, DoT; the single-question lookups net.Resolver can't do, plus a composite-flag codex and resolver-filtering detection.