## Summary
Closes #
## Changes
-
## Invariants and compatibility
- [ ] No on-disk format change
- [ ] No hash domain or canonical encoding change
- [ ] No public API break
- [ ] Backward compatible with existing databases
- [ ] Schema migration included (if any of the above are false)
## Tests
- [ ] Unit tests
- [ ] Property tests (`proptest`)
- [ ] Integration / multiprocess tests
- [ ] Golden-byte tests updated (if canonical encoding touched)
- [ ] Benchmarks updated (if performance affected)
## Security and safety
- [ ] No new `unsafe` blocks (or justified inline)
- [ ] No new `unwrap` / `expect` on fallible runtime paths
- [ ] No new panics reachable from public API
- [ ] Cryptographic changes reviewed for nonce / salt / key handling
## Performance
## Reviewer checklist
- [ ] Each changed line traces directly to the issue
- [ ] No drive-by refactors or unrelated cleanup
- [ ] No dead code introduced
- [ ] Errors carry actionable context
## Notes for reviewers