Skip to content

Sanitization 2.0.1

Choose a tag to compare

View all tags
@eldryoth eldryoth released this 20 Jul 12:32
v2.0.1
This tag was signed with the committer’s verified signature.
eldryoth
SSH Key Fingerprint: EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4
Verified
Learn about vigilant mode.
a4b86ac
This commit was signed with the committer’s verified signature.
eldryoth
SSH Key Fingerprint: EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4
Verified
Learn about vigilant mode.

Status: PASS
Reviewed-Commit: 0011490
Tester: Maintainer documentation-only review
Scope: sanitization crate family release 2.0.1 documentation and packaging changes
Date: 2026-07-20

Summary

Version 2.0.1 changes package versions, packaged README links, release notes,
lockfiles, the rolling source inventory, and package-archive validation. It
does not change runtime source code, unsafe boundaries, public Rust APIs,
constant-time implementation paths, memory-protection behavior, or secret
lifecycle semantics.

The review confirmed that repository-document links in the core package README
use absolute GitHub URLs and therefore resolve correctly when rendered by
crates.io. Package validation now rejects relative README links to unpackaged
repository documentation.

Disposition

  • No critical, high, medium, or low findings were identified.
  • All five crates package successfully at version 2.0.1 with matching internal
    dependency requirements.
  • Workspace tests, documentation tests, warning-denying Clippy, Kani, codegen,
    API/evidence checks, and package-archive validation passed.
  • The 2.0.0 security assessment remains applicable to the unchanged runtime
    implementation.
  • The temporary root PENTEST.md is absent from the release candidate.
Assets 2
Loading
0 Join discussion