envseal 0.3.13

Write-only secret vault with process-level access control — post-agent secret management
// Regression tests — fixed bugfixes that must not reappear.

pub mod approval_variants_exhaustive;
pub mod atomic_write_mode_0600_at_creation;
pub mod audit_chain_writer_reader_agreement;
pub mod audit_cross_process_lock;
pub mod audit_rotates_on_corruption;
pub mod c1_security_sealed_deletion_tripwire;
pub mod c2_target_dir_bypass_closed;
pub mod c3_windows_powershell_path_injection;
pub mod c4_mock_gui_runtime_guard;
pub mod c5_supervised_kill_uses_child_pid;
pub mod c6_test_backdoors_release_gated;
pub mod c7_concurrent_vault_init_race;
pub mod ctf_doctor_audit_checks;
pub mod ctf_flag_non_decryptable;
pub mod ctf_verify_rate_limited_and_audited;
pub mod decrypt_returns_zeroizing;
pub mod envseal_file_symlink_not_followed;
pub mod error_enum_non_exhaustive;
pub mod gap_coverage_real_property_tests;
pub mod gui_spoofing_defense;
pub mod h1_policy_lost_update_closed;
pub mod h3_seal_dacl_atomic_at_create;
pub mod h5_environ_exposure_closed;
pub mod h6_macos_hardened_runtime_enforced;
pub mod h_batch_1_policy_lock_and_peek_zeroize;
pub mod h_batch_2_shred_toctou_and_security_tripwire;
pub mod h_batch_3_seal_dacl_and_display_probe;
pub mod h_batch_4_persistent_unlock_backoff;
pub mod h_batch_5_6_documented_followups;
pub mod homoglyph_dialog_inputs_sanitized;
pub mod lifecycle_e2e;
pub mod m_batch_hardlink_and_overflow;
pub mod machine_id_removed;
pub mod master_key_atomic_no_tmp_leftover;
pub mod module_reexports_surface;
pub mod open_with_passphrase_round_trip;
pub mod pipe_enforces_binary_hash;
pub mod policy_security_sealed_no_plaintext;
pub mod policy_tampered_rejects_rename_secret;
pub mod policy_tampered_rejects_revoke_with_policy;
pub mod relay_rejects_insecure_endpoint;
pub mod relay_required_no_gui_fallback;
pub mod rule_expiry_re_prompts;
pub mod salt_file_removed;
pub mod security_config_system_toml_read_once;
pub mod symlink_destruction_defenses;
pub mod system_custom_ui_cmd_path_validated;
pub mod totp_decrypt_move_not_copy;
pub mod totp_rate_limit_persistent;
pub mod whitespace_only_envseal_mapping_rejected;
#[cfg(windows)]
pub mod windows_dacl_blocks_vm_read;