Module blob 

Recovered-BLOB enrichment (roadmap §4.5): make carved binary payloads addressable in a case by a magic-based media type and a SHA-256 content hash.

The media detection reads only documented file-format magic numbers (each cited below) from the leading bytes — a signature match, not a decode, so it is panic-free and never mis-parses a truncated payload. The hash is SHA-256 via the audited RustCrypto sha2 crate (never a hand-rolled digest), giving the court-standard content address every recovered image/document can be keyed on.

Functions

identify_media_type

Identify a BLOB’s media type from its leading magic bytes, or None when no known signature matches (or the payload is too short to carry one).

sha256_hex

The lowercase hex SHA-256 of bytes — the court-standard content address for a recovered BLOB, computed with the audited RustCrypto sha2 implementation.