Release Binary Tools 0.1.0

docs/ACCESSIBILITY.md

@@ -0,0 +1,3 @@
+# Accessibility
+
+Controls use native labels, buttons, selects and dialogs. Inspector formats expose tab semantics, parsing failures use alert regions, byte ranges have textual offsets, and every byte has an accessible label. Layout reflows below 62rem while wide byte rows remain horizontally scrollable. The shared shell provides system/light/dark themes and visible keyboard focus.

docs/ARCHITECTURE.md

@@ -0,0 +1,5 @@
+# Architecture
+
+The React workbench owns one canonical `Uint8Array`. Encoding views derive from it; imported text is parsed into a replacement buffer only after validation. The byte inspector renders 4 KiB pages while preserving absolute offsets, so a valid maximum-size buffer does not create a million DOM controls. `core/encoding.ts` contains bounded codecs. `core/inspect.ts` wraps CBOR/MessagePack libraries and implements strict, non-executing DER and Protobuf wire walkers with source offsets.
+
+All paths use relative Vite assets so the application can be mounted below the Toolbox portal. Release documentation and the manifest are generated before each build. Packaging sorts files, normalises modes and timestamps, and emits a SHA-256 sidecar.

docs/PRIVACY-SECURITY.md

@@ -0,0 +1,5 @@
+# Privacy and security
+
+Processing is local and in-memory. The CSP permits connections only to the current origin; the app itself performs none. No telemetry, cookies, persistence, service APIs or remote assets are used. The service worker caches only same-origin application assets.
+
+Untrusted byte streams are bounded to 1 MiB. Structural traversal is limited to depth 64 and 10,000 nodes; the deliberately quadratic Base58 path is limited to 4 KiB. ASN.1 support is DER TLV inspection, not BER/CER. Protobuf support handles wire types 0, 1, 2 and 5; schemas are inert JSON and cannot load code.