Tags

v0.2.0

- fix: EnvelopeSealer.Open uint32 overflow DoS guard
- test: coverage raised to 95%, injectable CSPRNG for RNG-failure paths
- docs: Sealer immutability / no-global-key / rotation design notes
- docs: full badge set (Go Report Card, lint, coverage, tag, license, Go version)

First reachable semver tag on main (v0.1.0 was on an orphaned history).

feat: initial implementation v0.1.0