Please do not open public issues for potential security vulnerabilities.

Open a private security advisory in GitHub Security Advisories for this repository.

Include:

• Affected commit/tag and environment
• Reproduction steps or proof-of-concept
• Expected security boundary vs observed behavior
• Impact assessment (confidentiality/integrity/availability)

• Initial acknowledgement: within 72 hours
• Triage outcome: within 7 days
• Remediation timeline: shared after triage based on severity

This project focuses on allocator safety and zeroization properties proven in SPARK for analyzed units. Security claims are bounded by current contracts, proof configuration, and integration context documented in the repository.