Derived stealth keys may linger in WASM linear memory after use.
Zero sensitive buffers after derivation in scanner Rust code and document limits of browser memory.
Acceptance criteria:
- Sensitive buffers zeroed on drop.
- Document states browser memory limits.
- No regression in scan performance.
Derived stealth keys may linger in WASM linear memory after use.
Zero sensitive buffers after derivation in scanner Rust code and document limits of browser memory.
Acceptance criteria: