base64-ng 1.0.2

[eldryoth]

base64-ng v1.0.2

Source Layout

• Split the std::io streaming adapters into src/stream.rs.
• Split stream integration tests into tests/stream.rs.
• Preserved the public base64_ng::stream::* API surface.

Security And Documentation

• Added #[must_use] to ct::CtEngine::decode_slice_staged_clear_tail.
• Strengthened constant-time documentation around staged decode, transient output windows, AArch64 CSDB attestation, RISC-V ordering-fence posture, and high-assurance comparison boundaries.
• Added a debug UTF-8 invariant check before the internal unchecked secret-string conversion.
• Clarified SecretBuffer::clear() cleanup ordering.
• Made stream::Encoder reject empty writes after finalization, matching non-empty write behavior.

Validation

• Full release gate passed.
• CodeQL and pentest were clean before tagging.
• Runtime dependency count remains zero.

---

This discussion was created from the release base64-ng 1.0.2.