Deterministic generic CBOR and a DAG-CBOR subset with content-ID helpers.
Both profiles reject non-canonical integers, indefinite-length items, floats, tags, out-of-order map keys, and trailing bytes, so a given value has exactly one accepted encoding. DAG-CBOR supports text map keys and signed 64-bit integers. Generic CBOR also supports integer map keys and the full unsigned 64-bit range. Input-size and nesting limits bound parser work; declared container lengths are checked against remaining input before allocating their contents.