Align 1.2.2 release documentation

Author: eldryoth

README.md

@@ -31,10 +31,12 @@ The crate starts conservative: a small scalar implementation, strict RFC 4648 be
 
 The current public release is `1.2.2`.
 
-`1.2.2` is a small ergonomics patch on top of the `1.2.0`
+`1.2.2` is a small ergonomics and hardening patch on top of the `1.2.0`
 encode-acceleration family release. It adds explicit infallible encode
-convenience helpers for ordinary byte-to-Base64 paths while keeping the
-fallible APIs as the recommended choice for untrusted length metadata,
+convenience helpers for ordinary byte-to-Base64 paths, documents their overflow
+panic boundary, and tightens the `base64-ng-sanitization` locked fixed-size
+decode path so staged plaintext is wiped even when locked allocation fails. The
+fallible APIs remain the recommended choice for untrusted length metadata,
 constrained allocation environments, and recoverable-error code paths. The
 `1.2.x` line admits conservative std runtime-dispatched encode acceleration for
 Standard and URL-safe alphabets on `x86`/`x86_64` AVX-512 VBMI, AVX2,

crates/base64-ng-tokio/src/lib.rs

@@ -8,7 +8,7 @@
 //! These helpers are bounded convenience functions, not streaming state
 //! machines. They read the async input to completion before writing output,
 //! which avoids partial decoded writes on malformed input and keeps
-//! cancellation semantics simple for the `1.0.9` companion release.
+//! cancellation semantics simple for the companion crate.
 
 use base64_ng::{Alphabet, Engine};
 use tokio::io::{self, AsyncRead, AsyncReadExt, AsyncWrite, AsyncWriteExt};

docs/CRATE_VERSION_MATRIX.md

@@ -5,7 +5,7 @@ crate remains the stable user entry point; companion crates are optional
 integration packages for applications that explicitly admit their dependency
 sets.
 
-## 1.2.2 Ergonomics Patch Release Plan
+## 1.2.2 Ergonomics And Hardening Patch Release Plan
 
 | Crate | Version | Publish In 1.2.2 | Cargo |
 | --- | --- | --- | --- |

docs/PLAN.md

@@ -745,6 +745,10 @@ Completed `1.2.0` work packages:
 
 - Add explicit infallible encode convenience helpers for ordinary
   byte-to-Base64 paths where invalid input is not possible.
+- Document the infallible helpers' encoded-length overflow panic boundary,
+  including the practical 32-bit large-input case.
+- Harden `base64-ng-sanitization` fixed-size locked secret decode so staged
+  plaintext is wiped even if locked allocation fails before the fill closure.
 - Keep the existing fallible encode helpers as the recommended API for
   untrusted length metadata, constrained allocation environments, and
   recoverable-error code paths.

docs/SIMD.md

@@ -57,8 +57,9 @@ The SIMD roadmap separates implementation evidence from active acceleration:
   non-dispatchable prototypes.
 - `1.2.1` is a documentation/package patch for the released `1.2.0` encode
   acceleration scope. It does not admit additional backends.
-- `1.2.2` is an encode ergonomics patch that adds explicit infallible encode
-  convenience helpers. It does not admit additional backends.
+- `1.2.2` is an encode ergonomics and sanitization hardening patch that adds
+  explicit infallible encode convenience helpers and tightens fixed-size locked
+  secret decode cleanup. It does not admit additional backends.
 - After the `1.2.x` encode release, pause feature work for a short soak period
   so users can report platform-specific encode regressions before decode
   acceleration work starts.

docs/SIMD_ADMISSION.md

@@ -15,13 +15,13 @@ only for backends named in this file and the release gate.
 - Gate priority: Active backend priority: AVX-512 VBMI, then AVX2, then SSSE3/SSE4.1 on x86/x86_64; NEON on aarch64.
 - Public performance claims: none without local benchmark evidence.
 - Release status: `1.2.2`; `1.2.0` admitted conservative active encode
-  dispatch, and `1.2.2` is an ergonomics patch for that released
-  family. Active encode dispatch admits AVX-512 VBMI above AVX2 above
-  SSSE3/SSE4.1 on x86/x86_64 and NEON on aarch64 for Standard and URL-safe
-  alphabet families. Decode, custom alphabets, in-place encode, `no_std`, and
-  wasm `simd128` remain scalar or prototype-only. Wrapped encode may use
-  admitted fixed-block encode for its unwrapped staging step; line-ending
-  insertion remains scalar.
+  dispatch, and `1.2.2` is an ergonomics and sanitization hardening patch for
+  that released family. Active encode dispatch admits AVX-512 VBMI above AVX2
+  above SSSE3/SSE4.1 on x86/x86_64 and NEON on aarch64 for Standard and
+  URL-safe alphabet families. Decode, custom alphabets, in-place encode,
+  `no_std`, and wasm `simd128` remain scalar or prototype-only. Wrapped encode
+  may use admitted fixed-block encode for its unwrapped staging step;
+  line-ending insertion remains scalar.
 
 ## Required For Every Admitted Backend
 

release-crates.toml

@@ -7,14 +7,14 @@ previous_version = "1.2.1"
 version = "1.2.2"
 change = "code"
 publish = true
-reason = "Adds explicit infallible encode convenience helpers and publishes matching 1.2.2 documentation."
+reason = "Adds explicit infallible encode convenience helpers, documents overflow panic boundaries, and publishes matching 1.2.2 documentation."
 
 [crates."base64-ng-sanitization"]
 previous_version = "1.2.1"
 version = "1.2.2"
 change = "code"
 publish = true
-reason = "Syncs companion crate package metadata and dependency examples with the 1.2.2 family patch."
+reason = "Hardens fixed-size locked secret decode staging cleanup and syncs package metadata with the 1.2.2 family patch."
 
 [crates."base64-ng-derive"]
 previous_version = "1.2.1"