sanitization-arrayvec

Small arrayvec integration crate for sanitization.

The main sanitization crate stays dependency-free. This sister crate provides SecretArrayVec<T, CAP>, a clear-on-drop wrapper around arrayvec::ArrayVec for projects that already use arrayvec.

use sanitization::SecretBytes;
use sanitization_arrayvec::SecretArrayVec;

let mut keys = SecretArrayVec::<SecretBytes<32>, 4>::new();
keys.push(SecretBytes::from_array([7; 32])).unwrap();
keys.clear_secret();

If push reaches capacity, arrayvec::CapacityError returns the original element unchanged. The caller must securely reuse or sanitize it. Use push_or_sanitize when rejection should consume and clear the element instead; that method returns a payload-free SanitizedCapacityError.