Sanitization 2.0.1

[eldryoth]

Status: PASS
Reviewed-Commit: 0011490
Tester: Maintainer documentation-only review
Scope: sanitization crate family release 2.0.1 documentation and packaging changes
Date: 2026-07-20

Summary

Version 2.0.1 changes package versions, packaged README links, release notes,
lockfiles, the rolling source inventory, and package-archive validation. It
does not change runtime source code, unsafe boundaries, public Rust APIs,
constant-time implementation paths, memory-protection behavior, or secret
lifecycle semantics.

The review confirmed that repository-document links in the core package README
use absolute GitHub URLs and therefore resolve correctly when rendered by
crates.io. Package validation now rejects relative README links to unpackaged
repository documentation.

Disposition

• No critical, high, medium, or low findings were identified.
• All five crates package successfully at version 2.0.1 with matching internal
  dependency requirements.
• Workspace tests, documentation tests, warning-denying Clippy, Kani, codegen,
  API/evidence checks, and package-archive validation passed.
• The 2.0.0 security assessment remains applicable to the unchanged runtime
  implementation.
• The temporary root PENTEST.md is absent from the release candidate.

---

This discussion was created from the release Sanitization 2.0.1.