Treat message archives as untrusted input. Readers validate record boundaries, offsets and decoding, but archives must remain stable while being read.

Report vulnerabilities privately through GitHub security advisories. Do not put private archives, message contents or credentials in public issues. Security review targets the released 1.2.x line. Version 1.2.0 is on PyPI.

Writer sessions validate the base under their operation lock and roll back handled I/O failures. Keep GoldED closed; direct file access bypasses this lock. No recovery guarantee covers process termination or power loss. Archive mode is for reading damaged records, never for editing them.