## Summary
## Medium affected
- [ ] Image stego (JPEG / Ghost / Armor / SI-UNIWARD / Shadow)
- [ ] Video stego (H.264 CABAC v2 / streaming orchestrator)
- [ ] New media type (please describe)
- [ ] Cross-cutting (det_math, crypto, stc, codec parser, FFI)
- [ ] Tooling (CLI, examples, build scripts)
- [ ] Documentation only
## Linked issue
## Test plan
- [ ] Added a regression test (required for behavior changes).
- [ ] All existing tests pass with the new code.
- [ ] If perf-sensitive: ran a benchmark; results in PR description.
## Cross-cutting checklist
- [ ] No `f64::sin/cos/atan2/hypot` introduced (use `det_math`).
- [ ] No FMA / non-deterministic SIMD in code paths affecting
output bytes.
- [ ] No `HashMap` iteration in output-affecting paths.
- [ ] No new `unwrap()` / `expect()` on production paths.
- [ ] No new C/C++ FFI in `core/`.
- [ ] No large binary fixtures committed.
## Codec / clean-room attestation
- [ ] N/A — this PR does not touch a clean-room codec subtree.
- [ ] I followed the spec-as-reference workflow: studied the
spec / upstream-as-reference, wrote an algorithm note,
implemented from my own note. No copy-paste from third-
party encoder source.
- [ ] I have NOT read x264 / libx264 source. (Or: I have, and
I'm flagging it here so the maintainer can decide whether
to accept.)
## DCO sign-off
By submitting this PR, I confirm that:
- [ ] I have signed every commit with `git commit --signoff`.
- [ ] I have the right to contribute this code under
GPL-3.0-only.