Security fixes target the latest published crates.io release of partitionline on the 0.x line. Older 0.x releases may not receive backports.

Please use GitHub Security Advisories for this repository. Do not open a public issue with exploit details.

In scope: protocol decode/encode memory safety, authentication material handling in this crate, and dependency advisories affecting default features.

Out of scope: broker-side ACL misconfiguration, application secret management, and unsigned benchmark / Suite HOLD claims (see docs/STATUS.md).

Threat model and verification posture: docs/security.md.