.cargo/deny.toml

[bans]
multiple-versions = "deny"
wildcards = "allow"
highlight = "all"

# Explicitly flag the weak cryptography so the agent is forced to justify its existence
[[bans.skip]]
name = "md-5"
version = "*"
reason = "MUST VERIFY: Only allowed for legacy checksums, never for security."

[[bans.skip]]
name = "sha1"
version = "*"
reason = "MUST VERIFY: Only allowed for backwards compatibility."
ci: add security policy, cargo-deny configuration, and audit workflow 2026-03-15 00:02:03 +04:00			`[bans]`
			`multiple-versions = "deny"`
			`wildcards = "allow"`
			`highlight = "all"`

			`# Explicitly flag the weak cryptography so the agent is forced to justify its existence`
			`[[bans.skip]]`
			`name = "md-5"`
			`version = "*"`
			`reason = "MUST VERIFY: Only allowed for legacy checksums, never for security."`

			`[[bans.skip]]`
			`name = "sha1"`
			`version = "*"`
security: harden handshake/masking flows and add adversarial regressions 2026-03-16 20:04:41 +04:00			`reason = "MUST VERIFY: Only allowed for backwards compatibility."`