`compression.gzip_decompress` expands an RFC 1952 gzip member into bytes. The wrapper validates the header, optional fields, CRC-32, and ISIZE. ISIZE provides an O(1) decompression-bomb check before DEFLATE decoding: any member declaring more than `1024 * compressed_len` output bytes is rejected.