
# cargo-vet audits file

[[audits.apis-saltans-aps]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.0 -> 0.3.0"
notes = "AI-assisted: reviewed diff 0.2.0 -> 0.3.0; crate source unchanged, only version/dependency bump to apis-saltans-core 0.4."

[[audits.apis-saltans-core]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.3.0 -> 0.4.0"
notes = "AI-assisted: reviewed diff 0.3.0 -> 0.4.0; adds Cluster profile/manufacturer metadata and Profile::broadcast_endpoint helper. No unsafe code or ambient I/O/process/network changes."

[[audits.apis-saltans-hw]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.0 -> 0.3.0"
notes = "AI-assisted: reviewed diff 0.2.0 -> 0.3.0; frame metadata now requires profile and stores Box<[u8]> payloads, plus dependency bumps. Existing unsafe constructors remain invariant-only wrappers with safe constructors; no new I/O/process/network capabilities."

[[audits.apis-saltans-zcl]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.0 -> 0.3.0"
notes = "AI-assisted: reviewed diff 0.2.0 -> 0.3.0; macro/trait changes move profile/manufacturer metadata onto Cluster implementations. No new ambient capabilities; existing unsafe APIs remain invariant/documentation helpers."

[[audits.apis-saltans-zdp]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.0 -> 0.3.0"
notes = "AI-assisted: reviewed diff 0.2.0 -> 0.3.0; generated ZDP commands now expose Profile::Network metadata and delegate profile through enums. No unsafe code or ambient I/O/process/network changes."

[[audits.ashv2]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "1.2.7 -> 8.1.0"
notes = "AI-assisted: reviewed major diff 1.2.7 -> 8.1.0; no new unsafe code in src (unsafe removed from old helper), protocol logic refactored to actor architecture"

[[audits.ashv2]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "8.1.0 -> 8.1.1@git:2dcd71bcaa8526691f4c9c1453f07b787fbf1f77"
importable = false
notes = "AI-assisted: reviewed local diff 8.1.0 -> 8.1.1@git:2dcd71bcaa8526691f4c9c1453f07b787fbf1f77; source code unchanged, only manifest/readme/architecture/lockfile updates. Crate denies unsafe_code and has no new ambient capability surface beyond serial I/O."

[[audits.autocfg]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "1.5.0 -> 1.5.1"
notes = "AI-assisted: reviewed diff 1.5.0 -> 1.5.1"

[[audits.bitflags]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "2.11.1 -> 2.13.0"
notes = "AI-assisted: reviewed diff 2.11.1 -> 2.13.0"

[[audits.cc]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "1.2.53 -> 1.2.65"
notes = "AI-assisted: reviewed diff 1.2.53 -> 1.2.65"

[[audits.cc]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "1.2.65 -> 1.2.66"
notes = "AI-assisted: reviewed diff 1.2.65 -> 1.2.66; target parsing/QNX support and kache wrapper additions. No new unsafe code paths; process execution remains expected compiler/probe behavior for cc build helper."

[[audits.chacha20]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.10.0 -> 0.10.1"
notes = "AI-assisted: reviewed diff 0.10.0 -> 0.10.1"

[[audits.chrono]]
who = "Codex"
criteria = "safe-to-deploy"
version = "0.4.45"
notes = "AI-assisted: inspected full source 0.4.45"

[[audits.const_env]]
who = "Codex"
criteria = "safe-to-deploy"
version = "0.1.5"
notes = "AI-assisted: inspected full source 0.1.5"

[[audits.const_env_impl]]
who = "Codex"
criteria = "safe-to-deploy"
version = "0.1.5"
notes = "AI-assisted: inspected full source 0.1.5"

[[audits.cpufeatures]]
who = "Codex"
criteria = "safe-to-deploy"
version = "0.2.2"
notes = "AI-assisted: inspected full source 0.2.2"

[[audits.cpufeatures]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.2 -> 0.3.0"
notes = "AI-assisted: reviewed diff 0.2.2 -> 0.3.0"

[[audits.crc-catalog]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "2.4.0 -> 2.5.0"
notes = "AI-assisted: reviewed diff 2.4.0 -> 2.5.0"

[[audits.enum-iterator]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "2.1.0 -> 2.3.0"
notes = "AI-assisted: reviewed diff 2.1.0 -> 2.3.0"

[[audits.enum-iterator-derive]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "1.4.0 -> 1.5.0"
notes = "AI-assisted: reviewed diff 1.4.0 -> 1.5.0"

[[audits.ezsp]]
who = "Codex"
criteria = "safe-to-deploy"
version = "5.2.0"
notes = "AI-assisted: inspected local crate source for ezsp 5.2.0; crate denies unsafe code and the current changes are protocol frame/parameter macro and enum generation refactors."

[[audits.ezsp]]
who = "Codex"
criteria = "safe-to-deploy"
version = "7.0.0"
notes = "AI-assisted: inspected local crate source for ezsp 7.0.0; NCP API, apis-saltans integration, parameter macros, and documentation updates. Existing unsafe surface is limited to explicitly marked unchecked value constructors; no new ambient capability surface beyond configured transport serial I/O and async channels."

[[audits.ezsp]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "1.2.4 -> 1.5.0"
notes = "AI-assisted: reviewed diff 1.2.4 -> 1.5.0"

[[audits.find-msvc-tools]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.1.8 -> 0.1.9"
notes = "AI-assisted: reviewed diff 0.1.8 -> 0.1.9"

[[audits.futures-task]]
who = "Codex"
criteria = "safe-to-deploy"
version = "0.3.31"
notes = "AI-assisted: inspected full source 0.3.31"

[[audits.futures-task]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.3.31 -> 0.3.32"
notes = "AI-assisted: reviewed diff 0.3.31 -> 0.3.32"

[[audits.futures-util]]
who = "Codex"
criteria = "safe-to-deploy"
version = "0.3.21"
notes = "AI-assisted: inspected full source 0.3.21"

[[audits.futures-util]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.3.21 -> 0.3.32"
notes = "AI-assisted: reviewed diff 0.3.21 -> 0.3.32"

[[audits.getrandom]]
who = "Codex"
criteria = "safe-to-deploy"
version = "0.4.3"
notes = "AI-assisted: inspected full source 0.4.3"

[[audits.heapless]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.9.1 -> 0.9.3"
notes = "AI-assisted: reviewed diff 0.9.1 -> 0.9.3"

[[audits.iana-time-zone]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.1.64 -> 0.1.65"
notes = "AI-assisted: reviewed diff 0.1.64 -> 0.1.65"

[[audits.id-arena]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "2.2.1 -> 2.3.0"
notes = "AI-assisted: reviewed diff 2.2.1 -> 2.3.0"

[[audits.intx]]
who = "Codex"
criteria = "safe-to-deploy"
version = "0.1.0"
notes = "AI-assisted: inspected full source 0.1.0"

[[audits.js-sys]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.3.77 -> 0.3.102"
notes = "AI-assisted: reviewed diff 0.3.77 -> 0.3.102"

[[audits.js-sys]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.3.102 -> 0.3.103"
notes = "AI-assisted: reviewed diff 0.3.102 -> 0.3.103"

[[audits.le-stream]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "5.0.0 -> 10.1.2"
notes = "AI-assisted: reviewed diff 5.0.0 -> 10.1.2"

[[audits.le-stream]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "10.1.2 -> 10.1.4"
notes = "AI-assisted: reviewed diff 10.1.2 -> 10.1.4; mostly documentation/tests clarifying collection semantics and feature coverage. No unsafe code or ambient I/O/process/network changes."

[[audits.le-stream-derive]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "1.3.2 -> 1.3.8"
notes = "AI-assisted: reviewed diff 1.3.2 -> 1.3.8"

[[audits.le-stream-derive]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "1.3.8 -> 1.3.10"
notes = "AI-assisted: reviewed diff 1.3.8 -> 1.3.10; derive docs updated and enum ToLeStream generation now uses explicit discriminants instead of unsafe repr pointer reads. No new ambient capabilities."

[[audits.log]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.4.29 -> 0.4.32"
notes = "AI-assisted: reviewed diff 0.4.29 -> 0.4.32"

[[audits.log]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.4.32 -> 0.4.33"
notes = "AI-assisted: reviewed diff 0.4.32 -> 0.4.33"

[[audits.memchr]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "2.7.5 -> 2.8.2"
notes = "AI-assisted: reviewed diff 2.7.5 -> 2.8.2"

[[audits.once_cell]]
who = "Codex"
criteria = "safe-to-deploy"
version = "1.12.0"
notes = "AI-assisted: inspected full source 1.12.0"

[[audits.once_cell]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "1.12.0 -> 1.21.4"
notes = "AI-assisted: reviewed diff 1.12.0 -> 1.21.4"

[[audits.pin-project-lite]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.16 -> 0.2.17"
notes = "AI-assisted: reviewed diff 0.2.16 -> 0.2.17"

[[audits.r-efi]]
who = "Codex"
criteria = "safe-to-deploy"
version = "6.0.0"
notes = "AI-assisted: inspected full source 6.0.0"

[[audits.rand]]
who = "Codex"
criteria = "safe-to-deploy"
version = "0.10.2"
notes = "AI-assisted: inspected full source 0.10.2; no build script or runtime process/network/filesystem access in library code. Unsafe is limited to documented RNG buffer fills, thread-local UnsafeCell access, SIMD/transmute distribution support, and valid UTF-8/char construction."

[[audits.rand_core]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.10.0 -> 0.10.1"
notes = "AI-assisted: reviewed diff 0.10.0 -> 0.10.1"

[[audits.repr-discriminant]]
who = "Codex"
criteria = "safe-to-deploy"
version = "3.0.1"
notes = "AI-assisted: inspected full source 3.0.1"

[[audits.repr-discriminant-derive]]
who = "Codex"
criteria = "safe-to-deploy"
version = "2.0.0"
notes = "AI-assisted: inspected full source 2.0.0"

[[audits.serialport]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "4.7.2 -> 4.9.0"
notes = "AI-assisted: reviewed diff 4.7.2 -> 4.9.0"

[[audits.shlex]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "1.3.0 -> 2.0.1"
notes = "AI-assisted: reviewed diff 1.3.0 -> 2.0.1"

[[audits.silizium]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "1.0.5 -> 2.1.0"
notes = "AI-assisted: reviewed major diff 1.0.5 -> 2.1.0; no unsafe code paths, primarily status/enum API and dependency updates"

[[audits.slab]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.4.11 -> 0.4.12"
notes = "AI-assisted: reviewed diff 0.4.11 -> 0.4.12"

[[audits.stable_deref_trait]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "1.2.0 -> 1.2.1"
notes = "AI-assisted: reviewed diff 1.2.0 -> 1.2.1"

[[audits.thiserror]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "2.0.16 -> 2.0.17"
notes = "AI-assisted: reviewed diff 2.0.16 -> 2.0.17"

[[audits.thiserror]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "AI-assisted: reviewed diff 2.0.17 -> 2.0.18"

[[audits.thiserror-impl]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "2.0.16 -> 2.0.17"
notes = "AI-assisted: reviewed diff 2.0.16 -> 2.0.17"

[[audits.thiserror-impl]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "AI-assisted: reviewed diff 2.0.17 -> 2.0.18"

[[audits.tokio-task-pool]]
who = "Codex"
criteria = "safe-to-deploy"
version = "0.1.8"
notes = "AI-assisted: inspected full source 0.1.8"

[[audits.unescaper]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.1.6 -> 0.1.8"
notes = "AI-assisted: reviewed diff 0.1.6 -> 0.1.8"

[[audits.unescaper]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.1.8 -> 0.1.10"
notes = "AI-assisted: reviewed diff 0.1.8 -> 0.1.10; adds unescape_lossy parsing, vertical-tab escape support, tests, docs, and CI metadata. No unsafe code or ambient I/O/process/network changes in library code."

[[audits.wasm-bindgen]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.100 -> 0.2.125"
notes = "AI-assisted: reviewed diff 0.2.100 -> 0.2.125"

[[audits.wasm-bindgen]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.125 -> 0.2.126"
notes = "AI-assisted: reviewed diff 0.2.125 -> 0.2.126"

[[audits.wasm-bindgen-macro]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.105 -> 0.2.125"
notes = "AI-assisted: reviewed diff 0.2.105 -> 0.2.125"

[[audits.wasm-bindgen-macro]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.125 -> 0.2.126"
notes = "AI-assisted: reviewed diff 0.2.125 -> 0.2.126"

[[audits.wasm-bindgen-macro-support]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.100 -> 0.2.125"
notes = "AI-assisted: reviewed diff 0.2.100 -> 0.2.125"

[[audits.wasm-bindgen-macro-support]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.125 -> 0.2.126"
notes = "AI-assisted: reviewed diff 0.2.125 -> 0.2.126"

[[audits.wasm-bindgen-shared]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.100 -> 0.2.125"
notes = "AI-assisted: reviewed diff 0.2.100 -> 0.2.125"

[[audits.wasm-bindgen-shared]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "0.2.125 -> 0.2.126"
notes = "AI-assisted: reviewed diff 0.2.125 -> 0.2.126"

[[audits.zmij]]
who = "Codex"
criteria = "safe-to-deploy"
delta = "1.0.20 -> 1.0.21"
notes = "AI-assisted: reviewed diff 1.0.20 -> 1.0.21"

[[trusted.apis-saltans-aps]]
criteria = "safe-to-deploy"
user-id = 290593 # Richard Neumann (neumann-paulmann)
start = "2026-07-01"
end = "2027-07-01"
notes = "Trusted publisher neumann-paulmann"

[[trusted.apis-saltans-core]]
criteria = "safe-to-deploy"
user-id = 290593 # Richard Neumann (neumann-paulmann)
start = "2026-07-01"
end = "2027-07-01"
notes = "Trusted publisher neumann-paulmann"

[[trusted.apis-saltans-hw]]
criteria = "safe-to-deploy"
user-id = 290593 # Richard Neumann (neumann-paulmann)
start = "2026-07-01"
end = "2027-07-01"
notes = "Trusted publisher neumann-paulmann"

[[trusted.apis-saltans-macros]]
criteria = "safe-to-deploy"
user-id = 290593 # Richard Neumann (neumann-paulmann)
start = "2026-07-01"
end = "2027-07-01"
notes = "Trusted publisher neumann-paulmann"

[[trusted.apis-saltans-zcl]]
criteria = "safe-to-deploy"
user-id = 290593 # Richard Neumann (neumann-paulmann)
start = "2026-07-01"
end = "2027-07-01"
notes = "Trusted publisher neumann-paulmann"

[[trusted.apis-saltans-zdp]]
criteria = "safe-to-deploy"
user-id = 290593 # Richard Neumann (neumann-paulmann)
start = "2026-07-01"
end = "2027-07-01"
notes = "Trusted publisher neumann-paulmann"

[[trusted.ashv2]]
criteria = "safe-to-deploy"
user-id = 290593 # Richard Neumann (neumann-paulmann)
start = "2025-07-04"
end = "2027-07-01"
notes = "Trusted publisher neumann-paulmann"

[[trusted.cc]]
criteria = "safe-to-deploy"
user-id = 55123 # rust-lang-owner
start = "2022-10-29"
end = "2027-06-23"

[[trusted.ezsp]]
criteria = "safe-to-deploy"
user-id = 290593 # Richard Neumann (neumann-paulmann)
start = "2025-07-04"
end = "2027-07-01"
notes = "Trusted publisher neumann-paulmann"

[[trusted.find-msvc-tools]]
criteria = "safe-to-deploy"
user-id = 539 # Josh Stone (cuviper)
start = "2025-08-29"
end = "2027-06-23"

[[trusted.js-sys]]
criteria = "safe-to-deploy"
user-id = 1 # Alex Crichton (alexcrichton)
start = "2019-03-04"
end = "2027-06-23"

[[trusted.le-stream]]
criteria = "safe-to-deploy"
user-id = 290593 # Richard Neumann (neumann-paulmann)
start = "2024-09-18"
end = "2027-07-01"
notes = "Trusted publisher neumann-paulmann"

[[trusted.le-stream-derive]]
criteria = "safe-to-deploy"
user-id = 290593 # Richard Neumann (neumann-paulmann)
start = "2024-09-18"
end = "2027-07-01"
notes = "Trusted publisher neumann-paulmann"

[[trusted.libc]]
criteria = "safe-to-deploy"
user-id = 55123 # rust-lang-owner
start = "2024-08-15"
end = "2027-06-23"

[[trusted.quote]]
criteria = "safe-to-deploy"
user-id = 3618 # David Tolnay (dtolnay)
start = "2019-04-09"
end = "2027-06-23"

[[trusted.semver]]
criteria = "safe-to-deploy"
user-id = 3618 # David Tolnay (dtolnay)
start = "2021-05-25"
end = "2027-06-23"

[[trusted.silizium]]
criteria = "safe-to-deploy"
user-id = 290593 # Richard Neumann (neumann-paulmann)
start = "2025-07-04"
end = "2027-07-01"
notes = "Trusted publisher neumann-paulmann"

[[trusted.syn]]
criteria = "safe-to-deploy"
user-id = 3618 # David Tolnay (dtolnay)
start = "2019-03-01"
end = "2027-06-23"

[[trusted.thiserror]]
criteria = "safe-to-deploy"
user-id = 3618 # David Tolnay (dtolnay)
start = "2019-10-09"
end = "2027-06-23"

[[trusted.thiserror-impl]]
criteria = "safe-to-deploy"
user-id = 3618 # David Tolnay (dtolnay)
start = "2019-10-09"
end = "2027-06-23"

[[trusted.tokio]]
criteria = "safe-to-deploy"
user-id = 6741 # Alice Ryhl (Darksonn)
start = "2020-12-25"
end = "2027-06-23"

[[trusted.unicode-ident]]
criteria = "safe-to-deploy"
user-id = 3618 # David Tolnay (dtolnay)
start = "2021-10-02"
end = "2027-06-23"

[[trusted.wasm-bindgen]]
criteria = "safe-to-deploy"
user-id = 1 # Alex Crichton (alexcrichton)
start = "2019-03-04"
end = "2027-06-23"

[[trusted.wasm-bindgen-macro]]
criteria = "safe-to-deploy"
user-id = 1 # Alex Crichton (alexcrichton)
start = "2019-03-04"
end = "2027-06-23"

[[trusted.wasm-bindgen-macro-support]]
criteria = "safe-to-deploy"
user-id = 1 # Alex Crichton (alexcrichton)
start = "2019-03-04"
end = "2027-06-23"

[[trusted.wasm-bindgen-shared]]
criteria = "safe-to-deploy"
user-id = 1 # Alex Crichton (alexcrichton)
start = "2019-03-04"
end = "2027-06-23"

[[trusted.windows-core]]
criteria = "safe-to-deploy"
user-id = 64539 # Kenny Kerr (kennykerr)
start = "2021-11-15"
end = "2027-06-23"

[[trusted.windows-implement]]
criteria = "safe-to-deploy"
user-id = 64539 # Kenny Kerr (kennykerr)
start = "2022-01-27"
end = "2027-06-23"

[[trusted.windows-interface]]
criteria = "safe-to-deploy"
user-id = 64539 # Kenny Kerr (kennykerr)
start = "2022-02-18"
end = "2027-06-23"

[[trusted.windows-result]]
criteria = "safe-to-deploy"
user-id = 64539 # Kenny Kerr (kennykerr)
start = "2024-02-02"
end = "2027-06-23"

[[trusted.windows-strings]]
criteria = "safe-to-deploy"
user-id = 64539 # Kenny Kerr (kennykerr)
start = "2024-02-02"
end = "2027-06-23"

[[trusted.windows-sys]]
criteria = "safe-to-deploy"
user-id = 64539 # Kenny Kerr (kennykerr)
start = "2021-11-15"
end = "2027-06-23"

[[trusted.windows-targets]]
criteria = "safe-to-deploy"
user-id = 64539 # Kenny Kerr (kennykerr)
start = "2022-09-09"
end = "2027-06-23"

[[trusted.windows_aarch64_gnullvm]]
criteria = "safe-to-deploy"
user-id = 64539 # Kenny Kerr (kennykerr)
start = "2022-09-01"
end = "2027-06-23"

[[trusted.windows_i686_gnullvm]]
criteria = "safe-to-deploy"
user-id = 64539 # Kenny Kerr (kennykerr)
start = "2024-04-02"
end = "2027-06-23"

[[trusted.windows_x86_64_gnullvm]]
criteria = "safe-to-deploy"
user-id = 64539 # Kenny Kerr (kennykerr)
start = "2022-09-01"
end = "2027-06-23"
