internal/

Package adapterdecode implements the shared, bounded, strict JSON boundary used by saved evidence adapters.

Package profiledocument provides shared strict decoding and disclosure checks for portable profile documents.

Package registrationurl validates the exact URLs that may be retained by browser-registration authoring and execution contracts.

Package secretwalk provides one configurable recursive boundary for secret-shaped strings and sensitive object keys.

Package strictjson validates one bounded JSON value before typed decoding.