Refresh 1.3.4 pentest report

Author: eldryoth

security/pentest/v1.3.4.md

@@ -1,7 +1,7 @@
 # base64-ng v1.3.4 Pentest Report
 
 Status: PASS
-Reviewed-Commit: cafa62ebc8f42c6390c798b0a237a7a9c896884d
+Reviewed-Commit: 4d2358f6f1e2bda980f532e874bd897e3e109a4d
 Tester: External maintainer-supplied LLM pentest
 Scope: `v1.3.3..HEAD`, plus security-critical modules at reviewed commit
 Date: 2026-07-03
@@ -12,7 +12,9 @@ External review found no Critical, High, Medium, or Low severity findings.
 The `1.3.3` to `1.3.4` diff is release-governance and evidence focused:
 big-endian QEMU evidence, stable Rust intrinsic-blocker checks, release
 metadata, documentation updates, CI target-bootstrap cleanup, and test/doc
-cleanup.
+cleanup. The final release gate also bounds Miri to representative harnesses
+while keeping exhaustive parity sweeps in the normal test, nextest, hardware,
+and CI gates.
 
 ## Reviewed Areas