Please report suspected vulnerabilities privately to security@integrallis.com, or via GitHub's private "Report a vulnerability" advisory feature on this repository. Do not open a public issue for security reports. We aim to acknowledge within 3 business days.

pleat is an approximate-membership filter. Note:

• Not adversary-resistant by construction. Keys are hashed with a fixed, non-cryptographic seed (xxh3). An adversary who can choose queried keys can inflate the false-positive rate. Do not use it as a security boundary against chosen-key attacks without an application-level keyed/randomized layer.
• Deserialization is validated. from_bytes rejects malformed, truncated, wrong-family, wrong-width, or corrupted buffers (checksum) and never triggers undefined behavior; report any input that panics or misbehaves as a bug.
• Unsafe code is confined to bounds-checked prefetches. There is one prefetch site for each filter family on x86_64. Both obtain the hinted address through slice::get, and Miri exercises the serialization and batch-query paths with prefetch disabled; report any soundness concern.