security/

Package antireplay provides a bounded request-ID / nonce cache with expiry.

Package attestation describes runtime identity evidence and trust levels.

Package redteam provides scenario definitions and runnable prevention tests for ShiftLock security controls.

Package scanner finds unsafe ShiftLock configurations and emits findings in text, JSON, or SARIF form.

Package signing provides Ed25519 helpers for ShiftLock high-value records.