DIS is a cryptographic library. Please treat vulnerabilities responsibly.

Do not open public issues for security vulnerabilities. Report privately via GitHub Security Advisories on this repository (or contact the maintainer directly). Include affected versions, reproduction, and impact. We aim to acknowledge within a few days.

• DIS composes only audited primitives (Argon2id via hash-wasm, AES-256-GCM / HKDF / SHA-256 via WebCrypto, ML-KEM-768 via @noble/post-quantum). It does not invent cryptography.
• Security properties, accepted residual risks, and unverified assumptions are documented in docs/threat-model.md and docs/crypto-review.md.
• Persisted formats are versioned and authenticated; unknown versions fail closed; legacy unauthenticated payloads are readable only on an explicit migration path.

Pre-1.0: only the latest 0.x minor receives fixes.