Module error 

The one error type for the whole VFS stack.

Panic-free (Paranoid Gatekeeper): every failure is a typed value carrying enough context to diagnose it. Two rules from the fleet discipline are baked into the shape here:

• Show the unrecognized value. VfsError::Unrecognized and VfsError::Decode carry the actual offending bytes (SmallHex) plus the offset and layer — an “unknown magic” report is useless without them.
• Bootstrap fails loud; only a per-node miss degrades. A base/decode failure is VfsError::Bootstrap/VfsError::Decode (never an empty result), distinct from a genuinely-unrecognized node.

Structs

SmallHex

A short, inline snapshot of offending bytes for diagnostics — never a heap allocation on the hot error path, and capped so a hostile stream cannot make an error message unbounded.

Enums

VfsError

Every fallible operation in the VFS returns this. #[non_exhaustive] so a new variant is an additive, non-breaking change.

Type Aliases

VfsResult

Convenience alias.