Module policy 

Code policy (RFC-003 §3, §11.1).

CodePolicy is a validated security object, not loose configuration. Its constructors reject impossible or risky shapes. Short codes below the secure minimum require an explicit opt-in constructor so the weaker choice is visible in code review (NFR-2).

Structs

CodePolicy

Validated policy governing code generation and validation.

Constants

DEFAULT_MAX_RAW_LEN

The maximum accepted raw (pre-normalization) input length. Bounds work done on hostile input before a lookup.

LEGACY_CIAO_LENGTH

The zinnias-ciao compatibility code length (6 symbols, ~29.7 bits).

SECURE_MIN_HUMAN_LENGTH

The secure minimum human-entered code length codlet enforces by default. 8 symbols over the 31-symbol alphabet is ~39.6 bits (RFC-003 §11.3).