- Sandbox the third-party codec decode (scanner/_sandbox.py); disarm quarantines on crash/OOM/hang
- Fix 4 false positives on compressed/heterogeneous files: explicit/implicit VR-mismatch
  length-walk desync, 1-bit bit-packing, YBR_FULL_422 subsampling, legal trailing padding
- Add composite re-identification-risk score + free-text PHI scan + optional OCR (--deid)
- Lossy-JPEG disarm policy + independent cross-decoder fidelity check
- Mixed-compression FP corpus (0 FP on conformant files across 12 transfer syntaxes)
- Aim-3 study harness (pinned OpenJPEG 2.3.0 + ASan) + STUDY_DESIGN preliminary results

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>