Criterion measurements for selected sanitizer, authorization, and secret-wrapper operations. Results are commit- and runner-specific.
HtmlSanitizer::sanitize(input) applies the configured Ammonia policy; applications must test their rendering context.
RbacGuard::authorize_owner_or_role(ctx) evaluates the supplied identity, owner, and roles. Correct context construction remains application-owned.
VaultSecret zeroizes its owned buffer on drop; it cannot erase prior copies, allocator artifacts, swap, or external logs.