[[audits.addr2line]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.24.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.ahash]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.8.12"
notes = "All unsafe is SIMD intrinsics (AES-NI, SSE2, SSSE3, ARM NEON) with correct cfg guards. zerocopy::transmute! for type conversions. Build script only checks target arch and compiler features. No I/O, no proc macros. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.aho-corasick]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.1.3"
notes = "Multi-pattern string matching by BurntSushi. 227 unsafe for SIMD/DFA perf. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.aho-corasick]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.1.3"
notes = "Multi-pattern string matching by BurntSushi. 227 unsafe for SIMD/DFA perf. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.aho-corasick]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.1.4"
notes = "Multi-pattern string matching by BurntSushi. SIMD/DFA optimized. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.aho-corasick]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.1.4"
notes = "Multi-pattern string matching by BurntSushi. SIMD/DFA optimized. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.aligned]]
who = "jerrysxie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.4.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.aligned]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.4.2 -> 0.4.3"
notes = "Delta audit 0.4.2->0.4.3: Adds Index/IndexMut impls for Range, RangeFrom, RangeInclusive, RangeToInclusive, RangeFull on Aligned<A,[T]>. All new unsafe blocks cast *const [T] to *const Aligned<A,[T]> (or mut equivalents), following the pre-existing RangeTo pattern. Ranges with non-zero start are guarded by check_start_index which verifies (index*size_of::<T>()) % A::ALIGN == 0. Alignment trait gains const ALIGN: usize. No build script (build=false), no proc macros, no powerful imports (core only), no_std crate. as-slice dep bumped 0.2.0->0.2.1. Extensive tests cover all range types. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.anstream]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.6.21"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.anstream]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.6.21 -> 1.0.0"
notes = "Delta: version bump only. anstyle-parse dep bumped 0.2->1.0, clippy lint rename (empty_enum->empty_enums), removed string_to_string lint. No source code changes. Assisted-by: copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.anstyle]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.10 -> 1.0.13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.anstyle]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.0.13 -> 1.0.14"
notes = "Delta: version bump, dev-dep version bumps, doc typo fix (the each -> each), clippy lint renames. No logic changes. Assisted-by: copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.anstyle-parse]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.2.7"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.anstyle-parse]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.2.7 -> 1.0.0"
notes = "Delta: version bump, dep version bumps, Cargo.toml field reordering, README URLs http to https, doc_auto_cfg to doc_cfg. No logic changes. Assisted-by: copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.anstyle-query]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "1.1.5"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.anstyle-wincon]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "3.0.11"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.aquamarine]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.6.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.aquamarine]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.6.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml"

[[audits.aquamarine]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.6.0"
notes = "This is to embedded mermaid diagrams into docs, nothing gets deployed"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-usb-pd/refs/heads/main/supply-chain/audits.toml"

[[audits.arbitrary-int]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.3.0"
notes = "Full: no_std arbitrary-width integers. Unsafe limited to new_unchecked and assert_unchecked. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.arbitrary-int]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.3.0"
notes = "Full: no_std arbitrary-width integers. Unsafe limited to new_unchecked. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.as-slice]]
who = "jerrysxie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.assert_approx_eq]]
who = "Douglas Cheah <douglascheah@microsoft.com>"
criteria = "safe-to-run"
version = "1.1.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-sensors/refs/heads/main/supply-chain/audits.toml"

[[audits.assert_approx_eq]]
who = "Douglas Cheah <douglascheah@microsoft.com>"
criteria = "safe-to-run"
version = "1.1.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.atomic]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.6.1"
notes = "Full: atomic wrapper for NoUninit types. Unsafe for transmute-based dispatch, sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/ffa/refs/heads/main/supply-chain/audits.toml"

[[audits.autocfg]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.4.0 -> 1.5.0"
notes = "No unsafe, no build.rs, no network access; delta adds edition-aware rustc probing and best-effort probe-file cleanup only. Assisted-by: copilot-cli:GPT-5.3-Codex"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.az]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.2.1"
notes = "No unsafe code. no_std library with only safe numeric cast traits. Build script probes for track_caller via rustc in OUT_DIR only. No network, no ambient capabilities. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.az]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.2.1 -> 1.3.0"
notes = "Delta audit: adds StrictCast/StrictAs/StrictCastFrom traits (future replacement for UnwrappedCast); UnwrappedCast now delegates to StrictCast; removes build.rs (track_caller now stable); adds nightly-float feature for f16/f128 behind feature gate; edition 2018->2024, MSRV 1.85.0; min_value()/max_value() -> MIN/MAX; cfg_attr(track_caller) simplified to #[track_caller]. No unsafe code, no new dependencies, no ambient capabilities. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.backtrace]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.3.75"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bare-metal]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.5"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.bbq2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.4.2"
notes = "no_std SPSC bip-buffer queue. Non-trivial unsafe for lock-free coordination and pointer arithmetic, all reviewed and sound. No build script, no proc macros, no I/O. Has Miri CI. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bbq2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.4.2 -> 0.4.3"
notes = "Delta: mechanical refactor adding alloc feature flag, migrating heap types (Arc, Box, Vec) from std to alloc crate for no_std+alloc support. No new unsafe code; existing unsafe impl Sync for BoxedSlice unchanged (only feature gate changed). No build script, no proc macros, no I/O. No new dependencies. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bilge]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.0"
notes = "Full: no_std bitfield facade. Unsafe trait Filled with sound blanket impl. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.bilge]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.0"
notes = "Full: no_std bitfield. Unsafe for transmutation, sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.bilge-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.0"
notes = "Full: proc-macro for bilge. Generated unsafe is bounded and sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.bilge-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.0"
notes = "Full: proc-macro generating bitfield accessors. 3 unsafe transmute sites are sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.bincode]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.0.1"
notes = "no_std binary serialization library. ~15 unsafe blocks for u8 type-specialization guarded by unty::type_equal and MaybeUninit patterns. No build script, no proc macros. std imports only for Encode/Decode trait impls. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bincode_derive]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.0.1"
notes = "Proc-macro derive for bincode Encode/Decode. No unsafe, no build script, no I/O. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bindgen]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.60.1"
notes = "C/C++ binding generator. Unsafe for libclang FFI. build.rs writes to OUT_DIR. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.bitfield]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.13.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.bitfield]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.13.2 -> 0.15.0"
notes = "Delta audit: BitRange/Bit traits split into read-only and mutable variants (BitRangeMut/BitMut); added mask constant generation; clippy fixes; MSRV bump. No unsafe, no build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bitfield]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.15.0 -> 0.17.0"
notes = "Delta: adds bitwise op derives, constructor derives, arbitrary visibility. Pure declarative macros. No unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bitfield]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.15.0 -> 0.19.2"
notes = "Delta: refactored to proc macros in bitfield-macros, added BitAnd/BitOr/BitXor, signed types, bool arrays. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bitfield]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.19.2 -> 0.19.4"
notes = "Delta: adds check_msb_lsb_order! debug_assert macro for better error messages on inverted MSB/LSB, adds TryInto re-export for new try_into field keyword, fixes no_std compat (std::compile_error -> core::compile_error). No unsafe code, no build script, no proc macros in this crate, no powerful imports. Tests only. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bitfield-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.19.2"
notes = "Proc-macro generating bitfield getters/setters/masks. No unsafe, no build script, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bitfield-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.19.2 -> 0.19.4"
notes = "Delta: adds try_into keyword support for fallible field conversions (generates TryInto/TryFrom-based getters returning Result), and adds check_msb_lsb_order! compile-time checks in array field getters/setters. No unsafe code, no build script, no new dependencies, no powerful imports. Proc-macro output remains safe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bitfield-struct]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.10.1"
notes = "Proc-macro crate generating safe bitfield structs. No unsafe, no build script. Standard proc-macro deps only. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bitfield-struct]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.10.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[audits.bitfield-struct]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.10.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[audits.bitfield-struct]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.10.1 -> 0.12.1"
notes = "Adds hash and bitenum derives, mostly parsing and refactoring changes. No code execution nor writing to the filesystem."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bitflags]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.9.1 -> 2.9.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[audits.bitflags]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.9.1 -> 2.9.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[audits.bitflags]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "2.9.1 -> 2.10.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.bitvec]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.1"
notes = "Bit-level addressable memory library. Extensive unsafe inherent to sub-byte addressing: BitSpan bit-packs pointer+index+length, BitPtr/BitRef bit-level pointer/proxy types. All Send/Sync bounds mirror std. No build script, no proc macros, no filesystem/network/process access. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.block-device-driver]]
who = "jerrysxie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bytemuck]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.25.0"
notes = "Full: safe transmutation library. Unsafe guarded by marker traits with size+alignment checks. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/ffa/refs/heads/main/supply-chain/audits.toml"

[[audits.bytemuck]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.22.0 -> 1.23.2"
notes = "Delta 1.22.0->1.23.2: new ZeroableInOption impls for function pointer types (sound, uses guaranteed niche optimization), core::error::Error impls behind feature flag, safe derive helper module. No new unsafe blocks, no build script, no I/O. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.bytemuck]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.23.2 -> 1.25.0"
notes = "Delta 1.23.2->1.25.0: New unsafe impl AnyBitPattern for [MaybeUninit<T>; N] (sound — any bit pattern valid for MaybeUninit arrays of AnyBitPattern types). Portable SIMD impls split by rustversion for LaneCount removal (same safety invariants). AVX512 feature gates simplified from nightly_stdsimd to stable avx512_simd. stdcall fn ptr ZeroableInOption impls correctly restricted to x86 only. New optional rustversion dep for compile-time version detection. No build script, no I/O, no new powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.cc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.2.21"
notes = "C compiler invocation. Unsafe for jobserver/COM. fs/process is core purpose. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.cc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.2.45"
notes = "C compiler invocation. Unsafe for jobserver/COM. fs/process is core purpose. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.cc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.2.41 -> 1.2.62"
notes = "Delta 1.2.41->1.2.62 (21 patch versions): Major env var refactor separating Cargo-provided vars (cargo_env_var/cargo_env_var_os) from user-overridable vars (get_env_overridable) and CC-specific vars (get_env); removes env_cache. Fixes deadlock in run_output by using wait_with_output instead of sequential stdout read + wait. Adds deterministic ar archive support (D modifier probe with ZERO_AR_DATE fallback). Fixes clang-cl cross-compilation to always pass --target= instead of -m64/-m32. Adds debug_str() for granular debug levels (line-directives-only, line-tables-only, limited). warnings(false) now emits -w/-W0. linker-plugin-lto always uses -flto=thin. Archiver batching by arg length (4000 chars) instead of fixed count. Adds VS2026, helenos, relibc, sh4, sanitizer targets, llvm-mingw wrapper detection. Apple SDK env matching uses default arms. Removes -fno-exceptions for wasm. Adds Build::env() public API, deprecates shared_flag/static_flag/__set_env. find-msvc-tools bumped 0.1.4->0.1.9. No new unsafe code, no build script, no proc macros. All changes consistent with stated purpose. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.cc]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.2.59 -> 1.2.60"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-embedded-controller/refs/heads/main/platform/dev-imxrt/supply-chain/audits.toml"

[[audits.cc]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.2.59 -> 1.2.60"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-embedded-controller/refs/heads/main/platform/dev-npcx/supply-chain/audits.toml"

[[audits.cc]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.2.59 -> 1.2.60"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-embedded-controller/refs/heads/main/platform/dev-qemu/supply-chain/audits.toml"

[[audits.cfg-if]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.0 -> 1.0.3"
notes = "Delta 1.0.0->1.0.3: formatting/readability refactor of macro identifiers, removed compiler_builtins dep, updated CI. No unsafe, no build script, no imports. Pure macro_rules crate. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.cfg-if]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "1.0.0 -> 1.0.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.cfg-if]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.0.3 -> 1.0.1"
notes = "Downgrade: reverts macro changes. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.cfg-if]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.3 -> 1.0.4"
notes = "Delta 1.0.3->1.0.4: macro refactored from two top-level rules to one using optional else syntax, fragment specifiers changed from :meta to :tt to support cfg(true)/cfg(false), internal helper renamed from @__identity to @__temp_group with added comment. MSRV 1.32 declared. No unsafe, no build script, no proc macros, no imports. Pure no_std macro_rules crate. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.cfg-if]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.3 -> 1.0.4"
notes = "Delta: macro refactor to tt-munching, supports cfg(true/false). No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.cfg-if]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.3 -> 1.0.4"
notes = "Delta: macro refactor to tt-munching. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.cfg-if]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.3 -> 1.0.4"
notes = "Delta: macro refactor to tt-munching. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.cfg-if]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.3 -> 1.0.4"
notes = "Delta: macro refactor to tt-munching. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.cfg-if]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.3 -> 1.0.4"
notes = "Delta: macro refactor to tt-munching. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.cfg-if]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.3 -> 1.0.4"
notes = "Delta: macro refactor to tt-munching. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.cfg-if]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.3 -> 1.0.4"
notes = "Delta: macro refactor to tt-munching. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.cfg-if]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.3 -> 1.0.4"
notes = "Delta: macro refactor to tt-munching. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.clang-sys]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.8.1"
notes = "Libclang bindings. Unsafe for FFI. build.rs finds libclang. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.colorchoice]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "1.0.3"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.colorchoice]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.3 -> 1.0.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.colorchoice]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.3 -> 1.0.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.colorchoice]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.3 -> 1.0.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.colorchoice]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.0.4 -> 1.0.5"
notes = "Delta: Cargo.toml field reordering, version bump, clippy lint renames. No source code changes. Assisted-by: copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.const-init]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.convert_case]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.6.0"
notes = "Pure string case-conversion library. No unsafe code, no build script, no powerful imports. Only dependency is unicode-segmentation. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.cordyceps]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.4"
notes = "Intrusive data structures crate (no_std). ~115 unsafe blocks, all necessary for intrusive linked list/queue/stack ops. Correct patterns: addr_of_mut, proper atomic orderings, Vyukov MPSC algorithm. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.cortex-m]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.7"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.cortex-m-rt]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.5"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.cortex-m-rt-macros]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.5"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.crc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "3.3.0"
notes = "No unsafe (forbid(unsafe_code)), no build script, no I/O, no_std pure CRC computation. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.crc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "3.3.0 -> 3.4.0"
notes = "Delta audit: MSRV bump 1.65 to 1.83, explicit lifetime annotations on Digest return types, const fn promotion on update. No unsafe code, no new dependencies, no behavioral changes. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.crc-catalog]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.4.0"
notes = "Pure no_std data-only crate. No unsafe, no build script, no dependencies, no I/O. Contains only const CRC algorithm parameter structs. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.crc-catalog]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.4.0 -> 2.5.0"
notes = "Delta: reformatted algorithm constants with doc comments, added #![forbid(unsafe_code)], derived Clone/Copy/Debug/PartialEq/Eq on Algorithm struct, added test suite. No unsafe code, no build script (build=false), no dependencies, no I/O. Pure data-only no_std crate. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.critical-section]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.2.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.crunchy]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.2.3 -> 0.2.4"
notes = "Tiny diff to use newer core/std features via build.rs env var for path separator; no safety impact. Assisted-by: copilot-cli:GPT-5.3-Codex"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.cty]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.2"
notes = "C type aliases. No unsafe, no deps. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.cty]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.2"
notes = "Full: C type aliases. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.darling]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.20.11"
notes = "Full: thin facade re-exporting darling_core/macro. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.darling_core]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.20.11"
notes = "Full: proc-macro attribute parsing internals. No unsafe, no fs/net. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.darling_macro]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.20.11"
notes = "Full: trivial 42-line proc-macro shim. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.dd-manifest-tree]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.0"
notes = "No unsafe code, no build script, no proc macros, no powerful imports. Pure trait abstraction unifying JSON/YAML/TOML value types. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.100"
notes = "Compatibility shim: no_std crate that re-exports defmt 1.x items for 0.3 API compatibility. No unsafe code, no build script, no powerful imports, no logic - pure pub-use re-exports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.100"
notes = "defmt-rtt is used for all our logging purposes."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.100 -> 0.3.8"
notes = "Delta: 0.3.100 is shim; 0.3.8 is full impl. Unsafe limited to Logger trait FFI. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.100 -> 0.3.10"
notes = "Downgrade delta from compat shim to full impl. Unsafe FFI is sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.100 -> 0.3.10"
notes = "Downgrade delta from compat shim to full impl. Unsafe FFI is sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.100 -> 0.3.10"
notes = "Downgrade delta from compat shim to full impl. Unsafe FFI to linker-provided logger symbols is sound. build.rs writes linker script to OUT_DIR only. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.100 -> 0.3.10"
notes = "Downgrade delta from compat shim to full impl. Unsafe FFI to logger symbols is sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.100 -> 0.3.10"
notes = "Downgrade delta from compat shim to full impl. Unsafe FFI to logger symbols is sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.100 -> 0.3.10"
notes = "Downgrade delta from compat shim to full impl. Unsafe FFI to logger symbols is sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.100 -> 0.3.10"
notes = "Downgrade delta from compat shim to full impl. Unsafe FFI to logger symbols is sound. build.rs writes linker script to OUT_DIR only. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta audit: No new unsafe code. build.rs adds xtensa-esp32s2-none-elf to no_cas list. New Format impls for core::fmt::Error and Wrapping are safe. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: Format impls for fmt::Error and Wrapping, xtensa target. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: Format impls for fmt::Error and Wrapping, xtensa target. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-cfu/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: Format impls for fmt::Error and Wrapping, xtensa target. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: Format impls for fmt::Error and Wrapping, xtensa target. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: Format impls for fmt::Error and Wrapping, xtensa target. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: Format impls for fmt::Error and Wrapping. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: Format impls for fmt::Error and Wrapping. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 0.3.9"
notes = "Delta: removes defmt_path support. No unsafe in macro. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 0.4.0"
notes = "Downgrade delta: removes configurable defmt crate path. No unsafe, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 0.4.0"
notes = "Downgrade delta: removes configurable defmt crate path. No unsafe, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 0.4.0"
notes = "Downgrade delta: removes configurable defmt crate path. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 0.4.0"
notes = "Downgrade delta: removes configurable defmt crate path. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 0.4.0"
notes = "Downgrade delta: removes configurable defmt crate path. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 0.4.0"
notes = "Downgrade delta: removes configurable defmt crate path. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 0.4.0"
notes = "Downgrade delta: removes configurable defmt crate path. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: adds transparent/bound derive attrs. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: adds transparent/bound derive attrs. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-cfu/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: adds transparent/bound derive attrs. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: adds transparent/bound derive attrs. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: adds transparent/bound derive attrs. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: adds transparent/bound derive attrs. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Delta: adds transparent/bound derive attrs. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.1 -> 1.1.0"
notes = "Proc-macro crate for defmt logging. Delta adds #[defmt(transparent)] and #[defmt(bound(...))] derive attributes, fixes && to || bug in env filter parse, simplifies log expansion. No new unsafe code. Generated unsafe (acquire/release guards) unchanged from prior version. Build script only reads DEFMT_LOG env var. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-parser]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-parser]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-parser]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.0 -> 0.3.4"
notes = "Delta: removes Octal/Cbor hints. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-parser]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.0 -> 0.4.1"
notes = "Downgrade delta: removes Cbor display hint variant. No unsafe, no build script, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-parser]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.0 -> 0.4.1"
notes = "Downgrade delta: removes Cbor display hint variant. No unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-parser]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.0 -> 0.4.1"
notes = "Downgrade delta: removes Cbor display hint variant. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-parser]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.0 -> 0.4.1"
notes = "Downgrade delta: removes Cbor display hint variant. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-parser]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.0 -> 0.4.1"
notes = "Downgrade delta: removes Cbor display hint variant. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-parser]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.0 -> 0.4.1"
notes = "Downgrade delta: removes Cbor display hint variant. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-parser]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.0 -> 0.4.1"
notes = "Downgrade delta: removes Cbor display hint variant. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.defmt-rtt]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.0"
notes = "defmt-rtt is used for all our logging purposes. Version 1.0.0 merely stabilizes what was already available previously."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.device-driver]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.7"
notes = "no_std device driver toolkit. Unsafe limited to ops.rs bitfield load/store using get_unchecked with documented invariants; fuzz-tested against bitvec. No build script, no proc macros, no filesystem/network/process access. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.device-driver]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.9"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[audits.device-driver]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.9"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.device-driver]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.9"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml"

[[audits.device-driver]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
version = "1.0.9"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[audits.device-driver]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
version = "1.0.9"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.device-driver]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
version = "1.0.9"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml"

[[audits.device-driver]]
who = "Adam Sasine <asasine@users.noreply.github.com>"
criteria = "safe-to-deploy"
delta = "1.0.7 -> 1.0.9"
notes = "Fixes compilation bugs for large registers but does not change invariants or testing strategy."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.device-driver-generation]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.7"
notes = "Code generation library for device-driver. No unsafe in generator itself; generated code uses unsafe for register bit ops (validated by MIR passes). Spawns rustfmt via std::process::Command. No filesystem/network access. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.device-driver-generation]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.7 -> 1.0.9"
notes = "Replaced runtime rustfmt subprocess with prettyplease::unparse(), removed 566-line kdl_transform.rs, off-by-one fix. Net removal of powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.device-driver-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.7"
notes = "Proc macro crate; no unsafe code, no build script. Reads manifest files from disk (relative to CARGO_MANIFEST_DIR) as expected for compile-time codegen. All code generation delegated to device-driver-generation. No network, process, or unexpected filesystem access. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.device-driver-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.7 -> 1.0.9"
notes = "Version bump only, updates pinned device-driver-generation dep. No code changes. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.diff]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.1.13"
notes = "Full audit of 0.1.13. Pure algorithmic LCS-based diff library (~157 lines in src/lib.rs). No unsafe code, no build script, no proc macros, no runtime dependencies. No filesystem, network, or process access. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.document-features]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.2.11 -> 0.2.12"
notes = "Delta audit: litrs dep bump 0.4 to 1.0, MSRV bump, trivial code. No unsafe, no new imports. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.document-features]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.2.11 -> 0.2.12"
notes = "Delta: litrs 1.0 API migration. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.either]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.15.0 -> 1.16.0"
notes = "Delta audit: No unsafe code changes (existing Pin unsafe unchanged, only macro rename). No build script, no proc macros, no powerful imports. Adds safe combinators and map_both! macro. No new deps. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-embedded-hal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.5.0"
notes = "No unsafe, no build script, no proc macros. no_std shared bus/flash partition utilities for embedded-hal traits. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-embedded-hal]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.5.0 -> 0.6.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-embedded-hal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.5.0 -> 0.6.0"
notes = "Edition 2024. Dependency updates (embassy-sync 0.8.0, embassy-hal-internal 0.4.0). Added defmt feature. Shared I2c impl Clone. Code improvements using .any(). Trusted publisher (lulf)."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-executor]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.9.1"
notes = "Full: embedded async executor. Unsafe in task mgmt is sound. No fs/net access. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-executor]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.9.1 -> 0.10.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-executor]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.9.1 -> 0.10.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-embedded-controller/refs/heads/main/platform/dev-imxrt/supply-chain/audits.toml"

[[audits.embassy-executor]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.9.1 -> 0.10.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-embedded-controller/refs/heads/main/platform/dev-npcx/supply-chain/audits.toml"

[[audits.embassy-executor]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.9.1 -> 0.10.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-embedded-controller/refs/heads/main/platform/dev-qemu/supply-chain/audits.toml"

[[audits.embassy-executor-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.7.0"
notes = "Full: proc-macro for embassy #[task]/#[main]. No unsafe in macro code. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-executor-macros]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.7.0 -> 0.8.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-executor-macros]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.7.0 -> 0.8.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-embedded-controller/refs/heads/main/platform/dev-imxrt/supply-chain/audits.toml"

[[audits.embassy-executor-macros]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.7.0 -> 0.8.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-embedded-controller/refs/heads/main/platform/dev-npcx/supply-chain/audits.toml"

[[audits.embassy-executor-macros]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.7.0 -> 0.8.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-embedded-controller/refs/heads/main/platform/dev-qemu/supply-chain/audits.toml"

[[audits.embassy-executor-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.7.0 -> 0.8.0"
notes = "Edition 2024. Added metadata-name feature for task naming. Changed task spawn API to return Result<SpawnToken, SpawnError>. More precise unsafe scope around mem::transmute. Trusted publisher (lulf)."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-executor-timer-queue]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-futures]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.2"
notes = "no_std future combinators. All unsafe is pin-projection and no-op RawWaker - reviewed and sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-hal-internal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.0"
notes = "no_std HAL internals. Unsafe in atomic ring buffer (sound SPSC), peripheral singletons, cortex-m interrupt priority. Build script emits cfg flags only. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-hal-internal]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.0 -> 0.4.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-hal-internal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.0 -> 0.4.0"
notes = "Edition update to 2024. Added defmt/log features and RingBuffer helper methods (available, is_half_full). Safe additions only. Trusted publisher (lulf)."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-hal-internal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.0 -> 0.4.0"
notes = "Rust 2024 edition update with new ring buffer methods (available, is_half_full). All unsafe code is sound HAL pattern usage. Build script unchanged (cfg flags only). No powerful imports."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-hal-internal]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.4.0 -> 0.5.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-embedded-controller/refs/heads/main/platform/dev-npcx/supply-chain/audits.toml"

[[audits.embassy-sync]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.8.0"
notes = "no_std async sync primitives. Substantial unsafe for UnsafeCell-based interiors and Send/Sync impls -- all reviewed and sound, guarded by RawMutex/critical_section. Build script only reads TARGET env var. No proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-sync]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.7.2 -> 0.8.0"
notes = "Edition 2024. Bug fix: wakers in Signal::reset. Remove Sized bound from MutexGuard::map. Dependency updates (embedded-io-async 0.7.0, heapless 0.9). Implement futures_sink::Sink. Trusted publisher (lulf)."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-time]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.5.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-time]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.5.0 -> 0.5.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-time]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.5.0 -> 0.5.1"
notes = "Edition 2024. Added nanosecond conversion methods, 375kHz tick rate. Dependency updates (embassy-executor 0.10.0, embassy-time-driver 0.2.2). Added log feature. Trusted publisher (lulf)."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-time]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.5.0 -> 0.5.1"
notes = "Rust 2024 edition update with import reordering. Unsafe pin projection patterns unchanged and sound. No build script. No new security concerns."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-time-driver]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.1"
notes = "no_std driver trait for embassy-time. Minimal unsafe for extern Rust FFI calls (sound via links key). Empty build.rs. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-time-driver]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.2.1 -> 0.2.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-time-driver]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.2.1 -> 0.2.2"
notes = "Rust 2024 edition update with 375kHz tick rate feature. Empty build.rs, no unsafe code, no powerful imports."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-time-driver]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.2.1 -> 0.2.2"
notes = "Simple addition of 375kHz tick rate support. Edition update to 2024 with modern unsafe syntax. No behavior changes, well-documented. Trusted publisher (lulf)."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-time-driver]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.5.0 -> 0.6.0"
notes = "No unsafe code, no build script, no powerful imports. Added Clone for I2C devices. Updated embassy dependencies (embassy-sync 0.7→0.8, embassy-hal-internal 0.3→0.4, embassy-time 0.5→0.5.1). All changes safe."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-time-queue-utils]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-time-queue-utils]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.0 -> 0.3.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.embassy-time-queue-utils]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.0 -> 0.3.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.0"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries]]
who = "Matteo Tullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.0"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries]]
who = "Matteo Tullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.1"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.1"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.1"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.4"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries-async]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.0"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries-async]]
who = "Matteo Tullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.0"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries-async]]
who = "Matteo Tullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries-async]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries-async]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries-async]]
who = "Matteo Tullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries-async]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.0"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries-async]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.1"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-batteries-async]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.4"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-crc-macros]]
who = "Matteo Tullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-fans]]
who = "Kurtis Dinelle <kdinelle@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.0"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-fans-async]]
who = "Kurtis Dinelle <kdinelle@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.0"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-hal]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.7"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-hal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.2.7 -> 1.0.0"
notes = "Pure no_std trait crate. Complete API redesign for 1.0: removed nb-based traits, CAN module, all unsafe code. Only defines traits/enums/types for digital, I2C, SPI, PWM, delay. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-hal-async]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.0"
notes = "no_std async HAL trait definitions. No unsafe in library. Build script only runs rustc --version. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-hal-mock]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.8.0 -> 0.11.1"
notes = "Delta: adds embedded-hal 1.x support. No unsafe, no network/fs access. Test mock infrastructure. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-hal-mock]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.8.0 -> 0.11.1"
notes = "Delta: adds embedded-hal 1.x support. No unsafe, test mock library. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-hal-mock]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.8.0 -> 0.11.1"
notes = "Delta: adds embedded-hal 1.x support. No unsafe, test mock library. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-hal-mock]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.8.0 -> 0.11.1"
notes = "Delta: adds embedded-hal 1.x support. No unsafe, test mock library. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-hal-mock]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.8.0 -> 0.11.1"
notes = "Delta: adds embedded-hal 1.x support. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-hal-mock]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.8.0 -> 0.11.1"
notes = "Delta: adds embedded-hal 1.x support. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-hal-mock]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.8.0 -> 0.11.1"
notes = "Delta: adds embedded-hal 1.x support. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-hal-mock]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.8.0 -> 0.11.1"
notes = "Test mock library for embedded-hal, no unsafe, no build script, restructured for eh0/eh1. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-hal-mock]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-run"
delta = "0.8.0 -> 0.11.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-hal-nb]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.0"
notes = "no_std trait-only crate. No unsafe, no build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-io]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.6.1 -> 0.7.1"
notes = "Add core::error::Error trait bound (MSRV 1.81). defmt 0.3->1.0. Implement ReadReady/WriteReady for slices and VecDeque. Add seek_relative(). Fix method forwardings. Trusted publisher (Dirbaio from Embedded WG)."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-io]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.6.1 -> 0.7.1"
notes = "No unsafe, no build script, no I/O. Trait evolution: Error requires core::error::Error (MSRV 1.81), BufRead: Read, Seek gains seek_relative, new VecDeque impls, defmt bumped to v1. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-io-async]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.6.1"
notes = "No unsafe. Build script only detects nightly via rustc --version. Pure async trait definitions for embedded I/O. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-io-async]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.6.1 -> 0.7.0"
notes = "Delta 0.6.1->0.7.0: No unsafe. Build script removed (AFIT now stable). flush() made required, BufRead requires Read, new VecDeque impls. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-io-async]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.6.1 -> 0.7.0"
notes = "Made Write::flush() required. Update to embedded-io 0.7 with core::Error. defmt 0.3->1.0. Fixed method forwardings. Removed nightly requirement (MSRV 1.81). Trusted publisher (Dirbaio from Embedded WG)."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-mcu-hal]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
version = "0.1.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-platform-common/refs/heads/main/common/supply-chain/audits.toml"

[[audits.embedded-mcu-hal]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.0"
notes = " Additionally, this is ODP owned crate."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-mcu-hal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-mcu-hal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.0"
notes = "Trait-based MCU HAL with zero unsafe code. No build script or powerful imports. Pure trait design with optional chrono/defmt features. Ideal for embedded controllers."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-mcu-hal]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.2.0 -> 0.3.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-sensors-hal]]
who = "Kurtis Dinelle <kdinelle@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.0"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-sensors-hal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.1.0 -> 0.1.1"
notes = "Delta audit: #![forbid(unsafe_code)] and #![no_std] remain enforced. No build script (build=false). Changes: defmt dep bumped 0.3.7->1.0.0, added paste dep for identifier concatenation, added assert_approx_eq dev-dep. New decl_threshold_traits! declarative macro generates blocking ThresholdSet/Hysteresis traits (and async ThresholdWait variant). Temperature and humidity modules invoke the macro and add comprehensive tests. Doc example fixes (crate name, struct typo). Typo fixes in ErrorKind Display impl. No unsafe code, no proc macros, no filesystem/network/process access. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-sensors-hal-async]]
who = "Kurtis Dinelle <kdinelle@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.0"
notes = "ODP crates are always trusted."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-storage]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.1"
notes = "Pure no_std storage abstraction traits. deny(unsafe_code), no build script, no dependencies, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-storage-async]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.4.1"
notes = "Pure no_std async trait definitions for NOR flash storage. No unsafe code, no build script, no powerful imports. Only dependency is embedded-storage. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-time]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.12.1"
notes = "Full audit: no_std embedded time library. deny(unsafe_code). No build script, no ambient capabilities. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-time]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.12.1"
notes = "Full: no_std time lib. deny(unsafe_code). Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-time]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.12.1"
notes = "Full: no_std time lib. deny(unsafe_code). Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-time]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.12.1"
notes = "Full: no_std time lib. deny(unsafe_code). Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-time]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.12.1"
notes = "Full: no_std time lib. deny(unsafe_code). No build script. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-time]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.12.1"
notes = "Full: no_std time lib. deny(unsafe_code). No build script. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-time]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.12.1"
notes = "Full: no_std time lib. deny(unsafe_code). No build script. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-time]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.12.1"
notes = "Full: no_std time lib. deny(unsafe_code). No build script. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-time]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.12.1"
notes = "Full: no_std time lib. deny(unsafe_code). No build script. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.embedded-time]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.12.1"
notes = "no_std time abstractions, #![deny(unsafe_code)], no build script, pure math. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.encode_unicode]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.3.6"
notes = "UTF-8/16 encoding library, unsafe for transmute/unchecked conversions (standard for encoding), no build script, no_std. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.env_filter]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.1.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.env_filter]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.1.4 -> 1.0.1"
notes = "Delta: version bump (0.1.4->1.0.1 stabilization), dep version bumps (log, regex, snapbox), clippy lint renames. No source code changes. Assisted-by: copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.env_logger]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.11.8"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.env_logger]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.11.8 -> 0.11.10"
notes = "Delta audit: internal module restructuring (writer moved from fmt/writer to writer), dependency version bumps, lint/doc updates, test file cleanup. No unsafe code, no new capabilities. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.errno]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.3.11"
notes = "Full: errno accessor. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.errno]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.3.8 -> 0.3.14"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.fastrand]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "2.0.2 -> 2.3.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.find-msvc-tools]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.9"
notes = "Full audit of find-msvc-tools 0.1.9, extracted from cc-rs. Zero dependencies. Unsafe code is COM/FFI wrappers for Windows registry, VS Setup Configuration COM interfaces, and kernel32 dynamic loading - all sound with proper Drop impls and error checking. Compile-time type check guards transmute_copy for dynamic GetMachineTypeAttributes. No build script, no proc macros, no network access. Only accesses filesystem/registry/COM to locate MSVC tooling as advertised. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.fixed]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.29.0"
notes = "no_std fixed-point number library. Unsafe limited to: bytemuck Pod/Zeroable impls on repr(transparent) types, NonZero::new_unchecked after proven-nonzero guards, unreachable_unchecked in exhaustive remainder logic. Build script probes compiler features in OUT_DIR. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.fixed]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.29.0 -> 1.31.0"
notes = "Delta audit 1.29.0->1.31.0. Unwrapped renamed to Strict; new unchecked_neg/shl/shr thin wrappers over std integer unchecked ops (sound); defmt feature delegates to Display; compat-readonly-static disables atomic caching. No new powerful imports, no build.rs logic changes. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.funty]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.0.0"
notes = "Pure trait definitions over Rust primitives. No unsafe, no build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.futures-core]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.31 -> 0.3.32"
notes = "Delta audit: version bump, Cargo.toml cosmetic reorder, AtomicWaker correctness fix (fetch_and to swap for cleaner state transition), ready! macro doc update. No new unsafe code, no build script, no proc macros, no powerful imports. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.futures-core]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.31 -> 0.3.32"
notes = "Delta: AtomicWaker state-release simplified. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.futures-core]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.31 -> 0.3.32"
notes = "Delta: AtomicWaker state-release simplified. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.futures-core]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.31 -> 0.3.32"
notes = "Delta: AtomicWaker state-release simplified. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.futures-macro]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.3.31 -> 0.3.32"
notes = "Delta: MSRV bump 1.56->1.71, Cargo.toml field reorder, whitespace fix in panic message. No logic changes. Assisted-by: copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.futures-sink]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.31 -> 0.3.32"
notes = "No source code changes, only Cargo.toml metadata reordering. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.futures-task]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.31"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.futures-task]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.3.31 -> 0.3.32"
notes = "Delta audit: metadata-only changes (MSRV bump 1.56->1.71, Cargo.toml section reorder, README update). No source code modifications. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.futures-timer]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "3.0.3"
notes = "Full audit of futures-timer 3.0.3. Timer/delay futures crate. Unsafe code: AtomicWaker uses UnsafeCell guarded by atomic state machine (WAITING/REGISTERING/WAKING), sound; RawWaker vtable in global.rs correctly manages Arc reference counts via into_raw/from_raw/ManuallyDrop; arc_list.rs uses Arc::into_raw/from_raw for lock-free intrusive list, pointer lifetimes correct; TimerHandle::set_as_global_fallback uses Weak::into_raw/from_raw with CAS, sound. unsafe impl Send+Sync for AtomicWaker justified by state machine protection. No build script, no proc macros. Only ambient capability is spawning one helper thread (std::thread) for the global timer, expected for a timer crate. No fs/net/process/env access. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.futures-timer]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "3.0.3 -> 3.0.4"
notes = "Delta audit 3.0.3->3.0.4: Overflow fix (Instant::now()+dur -> checked_add with far_future fallback), deprecated compare_and_swap replaced with compare_exchange (equivalent semantics, existing unsafe unchanged and sound), wasm deps cfg-gated to wasm32 only, dep version bumps, compilation warning fixes. No new unsafe, no build script, no proc macros, no new ambient capabilities. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.futures-util]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.3.31 -> 0.3.32"
notes = "Delta audit 0.3.31->0.3.32. Replaces pin-utils with core::pin::pin! (MSRV bumped to 1.71). Adds optional spin dep for no_std Shared future support. Removes unsafe initialize/set_len in read_to_end (replaced with safe extend). New pin_mut! macro uses standard Pin::new_unchecked pattern, sound. No build script, no proc macros, no new fs/net/process access. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.generator]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.8.7"
notes = "Full audit of stackful generator/coroutine library. Pervasively unsafe by nature: register context switching via inline assembly (x86_64, aarch64, arm, loongarch64, riscv64, ppc64), stack allocation via mmap/VirtualAlloc with guard pages, raw pointer-based stack management (StackBox, Context linked list). unsafe impl Send for Generator<'static, A, T> gated on A:Send+T:Send. transmute in scoped_init erases scope lifetime but constrained by 'a on GeneratorImpl. co_* methods bypass Any type-checking for performance. Signal/VEH handlers for stack overflow detection. Build script uses cc for ppc64 assembly and rustversion for nightly detection; no network/filesystem beyond standard. No proc macros. No filesystem, network, or process access in library code. Dependencies: cfg-if, log, libc (unix), windows (windows) — all appropriate. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.generator]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.8.7"
notes = "Stackful coroutine library, extensive unsafe for stack mgmt/context switching (inherent), benign build.rs using cc for asm. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.generator]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.5 -> 0.8.7"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.generator]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.7 -> 0.8.8"
notes = "Delta audit: replaces heavy windows crate with lighter windows-link/windows-result + auto-generated bindings (windows-bindgen 0.65.0). Fixes fn-ptr-to-int casts for strict provenance. Improves TLS optimization bug workaround on macOS/Windows (compiler_fence + black_box replacing double thread::current hack). No new unsafe patterns; all changes consistent with stackful coroutine purpose. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.getrandom]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.3.2"
notes = "Platform RNG. 87 unsafe for OS syscalls. build.rs: rustc detection. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.getrandom]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.3.3 -> 0.3.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.gimli]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.31.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.glob]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-run"
delta = "0.3.2 -> 0.3.3"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.half]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.5.0 -> 2.6.0"
notes = "Big change seems to be a change in the repo URL, but both the old and new URL resolve to the same place so it looks like the author is still in control."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.half]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.6.0 -> 2.7.1"
notes = "Delta audit: migrated unsafe transmutes to zerocopy::transmute! (safety improvement), added loongarch64 LSX SIMD (behind nightly feature), added Signed/Weight trait impls, added zerocopy derives on f16/bf16. New loongarch64 unsafe follows same sound MaybeUninit+intrinsics pattern. Net reduction in unsafe code. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.hash32]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.1"
notes = "no_std 32-bit hashing (FNV, MurmurHash3). ~10 unsafe blocks in murmur3.rs for MaybeUninit buffer handling - all sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.hash32]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.3.1 -> 0.2.1"
notes = "32-bit hashing library, unsafe for perf (transmute, unchecked indexing), sound. Uses deprecated mem::uninitialized for [u8;4] buffer. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.hashbrown]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.15.3"
notes = "SwissTable hashmap. 315 unsafe for perf. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.hashbrown]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.13.2 -> 0.14.5"
notes = "SwissTable hash map delta. Major changes: allocator refactored out of RawTableInner, new InsertSlot type, NEON SIMD for aarch64, allocator-api2 integration, new HashTable API, strict provenance. Extensive unsafe reviewed for soundness. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.hashbrown]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.16.0 -> 0.17.0"
notes = "Delta 0.16.0->0.17.0. Edition 2024, MSRV 1.85. Alloc module extracted from raw/. InsertSlot replaced with usize. Renames: buckets->num_buckets, get_many_mut->get_disjoint_mut. Serde->serde_core. Unsafe wrapped in blocks for unsafe_op_in_unsafe_fn - mechanical only. Over-sized alloc utilization. Bug fix 710: rehash panic guard. Fix 692 fallible_with_capacity. New bucket-index APIs. TryReserveError: Error+Display. No build script, no proc macros, no new powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.hashbrown]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.17.0 -> 0.17.1"
notes = "Patch release adding HashMap::rustc_try_insert (safe code using existing RawTable find/insert_entry). LSX SIMD optimization in control/group/lsx.rs replaces two intrinsics with immediate-operand equivalents (functionally equivalent, existing unsafe block). README formatting only. No build script, no proc macros, no new powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.hashlink]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.0"
notes = "Reviewed full source. Extensive unsafe for intrusive doubly-linked list (NonNull, MaybeUninit, union Links, unsafe Send/Sync) -- all gated correctly and follow standard patterns. Passes miri. No build script, no proc macros, no FS/net/process access. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.hashlink]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.7.0 -> 0.9.1"
notes = "Delta audit. Migrates from hashbrown::HashMap+NullHasher to hashbrown::HashTable. Adds no_std support. New CursorMut API, retain_with_order, shrink_to_fit. All unsafe follows pre-existing linked-list pointer patterns with guard node sentinel checks. Send/Sync extended with S bounds. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.heapless]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.8.0"
notes = "no_std fixed-capacity data structures. Extensive unsafe for MaybeUninit buffer management, lock-free queues (Vyukov MPMC, SPSC), and Treiber stack memory pools with ABA prevention. Patterns mirror std or published algorithms. Build script probes for atomic/LLSC support. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.heapless]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.9.2"
notes = "no_std fixed-capacity data structures. Extensive unsafe for MaybeUninit buffers, lock-free queues (Vyukov MPMC, SPSC), Treiber stack pools with ABA prevention (CAS tagged pointers + ARM LLSC). All Send/Sync bounds verified correct. Build script probes for ARM LLSC. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.heapless]]
who = "Felipe Balbi <felipe@balbi.sh>"
criteria = "safe-to-run"
version = "0.9.3"
notes = "no_std static-friendly collections (Vec, String, Deque, etc.), pulled in transitively by postcard-rpc 0.12. Extensive unsafe for in-place buffer management and atomic operations (inherent to a no-alloc collections crate); no network/fs/process access. build.rs only emits `cargo::rustc-cfg=arm_llsc`/`has_atomic_load_store` based on target triple, no codegen or external commands. Assisted-by: opencode:claude-opus-4.7-1m-internal"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.heapless]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.9.2 -> 0.9.1"
notes = "Downgrade: removes APIs, net reduction of unsafe surface. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.heapless]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.9.2 -> 0.9.3"
notes = "Delta 0.9.2->0.9.3: Fixes unsoundness in Deque/HistoryBuf/IndexMap::clear when Drop panics (Guard pattern). Adds CString conversions (into_string, into_bytes, from_bytes_truncating_at_nul), Deque::pop_front_if/pop_back_if, const Vec::from_array. New transmute_copy in as_len_type is sound (closed type enum). Pointer-cast cleanups. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.heck]]
who = "Matteo Tullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.4.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.husky-rs]]
who = "Dylan Knutson <tcdknutson@gmail.com>"
criteria = "safe-to-run"
version = "0.3.2"
notes = """
Add any notes about your audit below this line:

PR discussion regarding safe-to-run status: https://github.com/OpenDevicePartnership/odp-secure-services/pull/43#discussion_r2849005190
"""
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-secure-services/refs/heads/main/supply-chain/audits.toml"

[[audits.ident_case]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.ident_case]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "1.0.1"
notes = "Full: pure string case conversion, ~170 lines. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.include_dir]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.include_dir]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-usb-pd/refs/heads/main/supply-chain/audits.toml"

[[audits.include_dir]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml"

[[audits.include_dir_macros]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.include_dir_macros]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-usb-pd/refs/heads/main/supply-chain/audits.toml"

[[audits.include_dir_macros]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml"

[[audits.indexmap]]
who = "jerrysxie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.9.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.indexmap]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.12.0"
notes = "Ordered hashmap. 11 unsafe for newtype pointer casts, sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.indexmap]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.9.0 -> 2.11.0"
notes = "Forward delta audit covering serde_core migration, get_key_value_mut API, and Ord bound relaxation. No unsafe, no build script, no I/O. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.indexmap]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.11.4 -> 2.14.0"
notes = "Delta 2.11.4->2.14.0: Large internal refactor - IndexMapCore renamed to Core and moved to inner module, RefMut indirection eliminated. Entry types restructured across inner/map modules. Edition 2024, MSRV 1.85, hashbrown bumped to 0.17. No new unsafe code; existing unsafe in extract.rs (#![allow(unsafe_code)] for vec drain) and slice.rs (DST casts with repr(transparent)) unchanged and sound. New MaybeUninit usage in IntoKeys/IntoValues Clone impls is safe (uninit values created but never read). No build script, no proc macros, no filesystem/network/process access. New APIs: pop_if, split_at_checked, split_at_mut_checked, Clone for IntoKeys/IntoValues. Many methods made const. Error types use core::error::Error. Uses hash_one() and get_disjoint_mut (std API renames). Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.io-kit-sys]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.4.1"
notes = "Apple IOKit FFI bindings, unsafe is all extern C decls (expected), trivial build.rs for linker flag only. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.io-uring]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.5.13 -> 0.7.10"
notes = "Delta audit. Linux io_uring bindings. +15 hand-written unsafe (new from_fd, buffer/file registration APIs). SeqCst fence fix improves atomics correctness. Probe refactored to stack allocation. Build script adds cfg checks only. All unsafe for expected syscall/mmap/fd operations. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.io-uring]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.7.10 -> 0.7.9"
notes = "Downgrade: removes Pipe opcode and features. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.is_terminal_polyfill]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "1.70.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.itertools]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.10.3"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-usb-pd/refs/heads/main/supply-chain/audits.toml"

[[audits.itertools]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.10.5"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.itertools]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.10.5"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml"

[[audits.itertools]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.11.0"
notes = "Used as a dependency for embassy-imxrt."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.jiff]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.2.18"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.jiff]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.2.20"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.jiff]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.2.20 -> 0.2.24"
notes = "Delta audit: bug fixes (Date::new rejecting day<1, SignedDuration->Duration panic fix for negative nanos), perf optimization in ITimestamp::to_datetime (unsigned div/rem), new memory_usage() API on TimeZone/Zoned, comment/doc improvements. No new unsafe code, no build script (build=false), no proc macros, no new deps (jiff-tzdb 0.1.5->0.1.6, jiff-static pin bump). All changes match changelog. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.jiff-static]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.2.18"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.jiff-static]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.2.20"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.jiff-static]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.2.20 -> 0.2.24"
notes = "Delta audit: version bump + jiff-tzdb dep bump 0.1.4->0.1.6. Only code change is an optimization in ITimestamp::to_datetime() shifting into positive domain for unsigned div/rem (faster), plus new unit tests. No unsafe, no new imports, no build script changes. Proc-macro crate by BurntSushi. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.kdl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "6.3.4"
notes = "Pure KDL document language parser/formatter. No unsafe code, no build script, no proc macros, no filesystem/network/process access. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.lazycell]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.3.0"
notes = "Full: lazy cell. Proper atomic CAS. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.lazycell]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.3.0"
notes = "Lazy cell. Proper atomic CAS for AtomicLazyCell. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.libc]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.2.18"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.libc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.172"
notes = "C stdlib FFI types. 416 unsafe for extern declarations. build.rs detects platform. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.libc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.172"
notes = "C stdlib FFI types. 416 unsafe for extern declarations. build.rs detects platform. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.libc]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.2.172"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.libc]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.2.170 -> 0.2.177"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.libc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.2.176 -> 0.2.174"
notes = "Downgrade: reverts FFI additions. Pure bindings. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.libc]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.2.184 -> 0.2.185"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-embedded-controller/refs/heads/main/platform/dev-imxrt/supply-chain/audits.toml"

[[audits.libc]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.2.184 -> 0.2.185"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-embedded-controller/refs/heads/main/platform/dev-npcx/supply-chain/audits.toml"

[[audits.libc]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.2.184 -> 0.2.185"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-embedded-controller/refs/heads/main/platform/dev-qemu/supply-chain/audits.toml"

[[audits.libloading]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.8.6"
notes = "Dynamic library loading. Unsafe for dlopen/dlsym FFI. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.linux-raw-sys]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.4.15"
notes = "Linux kernel type bindings. Auto-generated. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.linux-raw-sys]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.9.4"
notes = "Linux kernel type bindings. Auto-generated. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.linux-raw-sys]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.6.5 -> 0.11.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.litrs]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.4.1 -> 0.4.2"
notes = "Delta 0.4.1->0.4.2: Bug fixes for non-ASCII byte string escapes, removes CR LF normalization to align with spec, fixes error span for out-of-range Unicode escapes. No unsafe code, no build script, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.litrs]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.4.2 -> 1.0.0"
notes = "Delta 0.4.2->1.0.0: Adds C string literal support (CStringLit), marks Literal enum #[non_exhaustive], removes proc-macro2 from default features, bumps MSRV to 1.56, changes num_hashes from u32 to u8 with 256 max, changes Buffer::Cow/ByteCow for String to owned types (String/Vec<u8>) instead of Cow<'static,...>. Refactors escape internals: replaces Escapee trait with Unescape enum and EscapeContainer trait, moves span offset responsibility to callers. Adds nul byte checking for C strings. No unsafe code, no build script, no proc macros, no powerful imports. Pure parsing library. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.litrs]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.4.2 -> 1.0.0"
notes = "Delta: adds CStringLit support, escape handling refactor. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.log]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.4.27 -> 0.4.28"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.maitake-sync]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.2"
notes = "No-std async sync primitives. Extensive unsafe for Send/Sync impls, UnsafeCell access under locks/atomics, intrusive linked list nodes, spinlocks -- all follow standard patterns. Uses unreachable_unchecked! macro (panics in debug). No build script, no proc macros. Loom-tested. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.maitake-sync]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.2.2 -> 0.1.2"
notes = "Async sync primitives, unsafe for low-level concurrency (expected), no build script, no powerful imports in production code. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.manyhow]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.11.4"
notes = "Proc macro error handling library, no unsafe, no build script, no I/O. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.manyhow-macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.11.4"
notes = "Proc macro for proc-macro boilerplate, no unsafe, no build script, no I/O. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.matchers]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.1.0 -> 0.2.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.maybe-async-cfg]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.5"
notes = "Proc macro for async/sync code generation, no unsafe, no build script, no I/O. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.memchr]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.7.4"
notes = "Optimized byte searching by BurntSushi. 326 unsafe for SIMD. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.memchr]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.7.4"
notes = "Optimized byte searching by BurntSushi. 326 unsafe for SIMD. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.memchr]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "2.7.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.memchr]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.7.6"
notes = "Optimized byte searching by BurntSushi. 332 unsafe for SIMD. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.memchr]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.7.6"
notes = "Optimized byte searching by BurntSushi. 332 unsafe for SIMD. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.memchr]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "2.7.4 -> 2.7.5"
notes = "Delta: doc typo fixes, removed compiler_builtins. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.miette]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "7.6.0"
notes = "Diagnostic/error reporting library. Substantial unsafe in eyreish/ module (type-erased vtable pattern forked from eyre): repr(C) layout, TypeId-guarded downcasts, ManuallyDrop -- all sound. std::fs used in one opt-in function. No build script, no proc macros. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.miette-derive]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "7.6.0"
notes = "Proc-macro derive for miette::Diagnostic. No unsafe, no build script, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.mimxrt600-fcb]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.1"
notes = "Pure no_std data-definition crate for MIMXRT600 flash config blocks. No unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.mimxrt600-fcb]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.2.1 -> 0.2.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.mimxrt633s-pac]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.4.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.mimxrt633s-pac]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.4.1"
notes = "New version of mimxrt633s-pac merely introduces safe enum variants for IRULESTAT register. No new unsafe blocks are introduced."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.mimxrt633s-pac]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.4.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.mimxrt633s-pac]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.5.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.mimxrt633s-pac]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.5.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.mimxrt685s-pac]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.5.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.mimxrt685s-pac]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.5.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.minimal-lexical]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.1"
notes = "Float parsing. Unsafe for bounded table access. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.minimal-lexical]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.1"
notes = "Full: float parsing. Bounded table access. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.miniz_oxide]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.8.8"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.mio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.0.1 -> 1.0.4"
notes = "Delta 1.0.1->1.0.4: I/O safety trait impls, AIX poll(2) support, windows-sys 0.59 pointer fixes. Unsafe Send/Sync for CompletionPort/Inner sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.mutex-traits]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.mutex-traits]]
who = "Felipe Balbi <felipe@balbi.sh>"
criteria = "safe-to-run"
version = "1.0.1"
notes = "Trait abstractions over Mutex implementations, pulled in transitively by heapless. Tiny crate: 5 unsafe lines (5 lock-API wrapper blocks marked `unsafe impl ConstThisStaysAcquired`/`Send`/`Sync`, all sound by construction since they wrap pre-locked APIs). #![deny(missing_docs)], no build script, no I/O. Assisted-by: opencode:claude-opus-4.7-1m-internal"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.mycelium-bitfield]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.5"
notes = "Pure safe no_std bitfield macro crate. No unsafe code, no build script, no proc macros, no dependencies, no powerful imports. Only core:: types used. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.nu-ansi-term]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.46.0 -> 0.50.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.num]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.0 -> 0.3.1"
notes = "Downgrade delta: version and dep changes only. no_std meta-crate. No unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.num]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.0 -> 0.3.1"
notes = "Downgrade: version-only dep bumps. no_std meta-crate. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.num]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.0 -> 0.3.1"
notes = "Downgrade: version-only dep bumps. no_std meta-crate. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.num]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.0 -> 0.3.1"
notes = "Downgrade: version-only dep bumps. no_std meta-crate. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.num]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.0 -> 0.3.1"
notes = "Downgrade: version-only dep bumps. no_std meta-crate. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.num]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.0 -> 0.3.1"
notes = "Downgrade: version-only dep bumps. no_std meta-crate. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.num]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.0 -> 0.3.1"
notes = "Downgrade: version-only dep bumps. no_std meta-crate. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.num]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.4.0 -> 0.4.3"
notes = "Pure re-export facade crate. Delta is edition bump (2018->2021), MSRV bump (1.31->1.60), and sub-crate version bumps. No unsafe, no build script, no I/O. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.num-bigint]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.4.3 -> 0.4.6"
notes = "Delta 0.4.3->0.4.6: build.rs removed (radix tables now const fn), new x86 inline asm div_wide with safe fallback (sound), new modinv/ConstZero/Euclid/FromBytes APIs, serde OOM mitigation. No fs/net/process access. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.num-complex]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.2 -> 0.3.1"
notes = "Downgrade delta: removes ComplexFloat trait, bytemuck support. Strict feature subset, no unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.num-complex]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.2 -> 0.3.1"
notes = "Downgrade: removes ComplexFloat, bytemuck. Feature subset. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.num-complex]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.2 -> 0.3.1"
notes = "Downgrade: removes ComplexFloat, bytemuck. Feature subset. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.num-complex]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.2 -> 0.3.1"
notes = "Downgrade: removes ComplexFloat, bytemuck. Feature subset. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.num-complex]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.2 -> 0.3.1"
notes = "Downgrade: removes ComplexFloat. Feature subset. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.num-complex]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.2 -> 0.3.1"
notes = "Downgrade: removes ComplexFloat. Feature subset. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.num-complex]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.2 -> 0.3.1"
notes = "Downgrade: removes ComplexFloat. Feature subset. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.num-complex]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.4.2 -> 0.4.6"
notes = "Delta 0.4.2->0.4.6: edition 2021 upgrade, const ZERO/ONE/I, c32/c64 constructors, rkyv/bytecheck support, powc zero fix, relaxed serde bounds. No new unsafe, no build script, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.num-iter]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.1.43 -> 0.1.45"
notes = "Delta audit: edition upgrade to 2018, MSRV 1.31, build.rs removed, i128 now unconditional, DoubleEndedIterator uses Integer::dec(). No unsafe, no powerful imports, no_std only. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.num-rational]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.1 -> 0.3.2"
notes = "Downgrade delta: removes Default impl, ldexp helper. Pure math, no unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.num-rational]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.1 -> 0.3.2"
notes = "Downgrade: removes Default impl, ldexp. Pure math. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.num-rational]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.1 -> 0.3.2"
notes = "Downgrade: removes Default impl, ldexp. Pure math. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.num-rational]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.1 -> 0.3.2"
notes = "Downgrade: removes Default impl, ldexp. Pure math. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.num-rational]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.1 -> 0.3.2"
notes = "Downgrade: removes Default impl. Pure math. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.num-rational]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.1 -> 0.3.2"
notes = "Downgrade: removes Default impl. Pure math. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.num-rational]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.1 -> 0.3.2"
notes = "Downgrade: removes Default impl. Pure math. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.num_enum]]
who = "Matteo Tullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.num_enum]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.5"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.num_enum]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.5"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.num_enum]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.7.4 -> 0.7.5"
notes = "Looks like this is just uptaking a new version of num_enum_derive"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.num_enum]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.7.5 -> 0.7.6"
notes = "Version bump with test infrastructure updates. No unsafe code, no build script, no powerful imports. Purely additive test changes."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.num_enum_derive]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.4"
notes = "Looks like mostly improvements to error messaging"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.num_enum_derive]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.5"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.num_enum_derive]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.5"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.num_enum_derive]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.7.4 -> 0.7.5"
notes = "Looks like this is just uptaking a new version of num_enum_derive"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.num_enum_derive]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.7.5 -> 0.7.6"
notes = "Minor update adding byte literal support for enum discriminants. No unsafe code, no build script, no powerful imports."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.nusb]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.1.14"
notes = "Pure Rust USB library, unsafe for FFI/transfer buffers (expected), no build script, std::fs only for sysfs reads. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.object]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.36.7"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.once_cell]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.20.1"
notes = "Single-assignment cells and lazy values. All unsafe reviewed: UnsafeCell access, Send/Sync impls, atomic waiter queue, strict provenance polyfill - all sound with correct bounds. No build script, no proc macros, no powerful imports beyond std::thread/atomic. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.once_cell]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "1.19.0 -> 1.20.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.once_cell]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.21.3 -> 1.21.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[audits.once_cell]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.21.3 -> 1.21.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[audits.once_cell]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.21.3 -> 1.21.4"
notes = "Delta: soundness fix for OnceCell::wait under parking_lot feature. The wait() in imp_pl.rs now wraps parking_lot_core::park in a while loop re-checking COMPLETE state, preventing uninitialized memory observation when concurrent get_or_try_init panics. Remaining changes: doc cfg guards, doc typo fix, new tests. No new unsafe, no build script, no proc macros, no new imports. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.once_cell]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.21.3 -> 1.21.4"
notes = "Soundness fix for OnceCell::wait with parking_lot feature (re-check after spurious wakeup). Added tests for OnceBool::get_or_try_init, OnceRef, wait_panic. Doc test conditional compilation fixes. Trusted publisher (matklad)."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.once_cell_polyfill]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "1.70.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.pico-de-gallo-hal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.1.0"
notes = "USB HAL library, no unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.pico-de-gallo-hal]]
who = "Felipe Balbi <felipe@balbi.sh>"
criteria = "safe-to-run"
delta = "0.1.0 -> 0.5.0"
notes = "Adds OneWire, UART, ADC, PWM, GpioStatefulOutputPin, set_config methods. Still no unsafe, no build script. Adds tokio block_in_place + nested-runtime detection (sync APIs callable from inside an async context). USB I/O via the existing PicoDeGallo client; no direct net/fs/process. Assisted-by: opencode:claude-opus-4.7-1m-internal"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.pico-de-gallo-internal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.1.0"
notes = "Pure data definition crate, no unsafe, no build script, no I/O, no_std. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.pico-de-gallo-internal]]
who = "Felipe Balbi <felipe@balbi.sh>"
criteria = "safe-to-run"
delta = "0.1.0 -> 0.5.0"
notes = "Expands wire protocol with OneWire/UART/ADC/PWM endpoints and new GpioDirection/GpioPull enums. Still no unsafe in src/. Adds a build.rs that writes a generated version-bytes file to OUT_DIR (no commands, no network/fs outside OUT_DIR, no codegen of arbitrary code). Assisted-by: opencode:claude-opus-4.7-1m-internal"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.pico-de-gallo-lib]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.1.0"
notes = "Async USB device library, no unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.pico-de-gallo-lib]]
who = "Felipe Balbi <felipe@balbi.sh>"
criteria = "safe-to-run"
delta = "0.1.0 -> 0.5.0"
notes = "Async client wrapping postcard-rpc + nusb for the Pico de Gallo USB bridge. Adds OneWire/UART/ADC/PWM/PWM-channel/SPI-device APIs matching pico-de-gallo-internal. Still no unsafe in src/, no build script. USB transport only; no direct net/fs/process. Assisted-by: opencode:claude-opus-4.7-1m-internal"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.pin-project]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.1.10"
notes = "no_std pin-projection helper. Re-exports proc macros from pin-project-internal. Minimal unsafe in __private module (drop guards, UnsafeUnpin forwarding) -- all sound with SAFETY comments. No build script, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.pin-project]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.1.10 -> 1.1.13"
notes = "Delta audit: changes are exclusively test UI .stderr expectation files updated for newer Rust compiler diagnostic formatting (line number alignment, error message wording changes). Removed obsolete overlapping_marker_traits test files for a feature removed from nightly. Zero source code changes - no changes to src/, build.rs, Cargo.toml, or proc macro logic. No new unsafe, no new imports, no behavioral changes. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.pin-project-internal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.1.10"
notes = "Proc-macro for pin projection. forbid(unsafe_code) in macro itself. Generated unsafe is sound pin projection (Pin::new_unchecked, get_unchecked_mut) with compile-time safety enforced via trait tricks. No build script, no I/O. Deps: proc-macro2, quote, syn only. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.pin-project-internal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.1.10 -> 1.1.13"
notes = "Delta audit: proc macro crate with #![forbid(unsafe_code)]. Changes are idiomatic Rust refactoring (let-else, is_some_and), clippy lint config adjustments, doc comment fixes, and MSRV bump 1.56->1.71. No new unsafe code, no filesystem/network/process access, no behavioral changes. Generated code adds #[allow(clippy::missing_trait_methods)] to Drop impl. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.pin-project-lite]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.2.16 -> 0.2.17"
notes = "Delta audit: no unsafe code, no build script, no proc macros, no powerful imports. Changes are cosmetic only: updated clippy lint suppressions, doc comment formatting, test stderr updates for newer compiler messages. No functional changes to macro logic. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.pin-project-lite]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.2.16 -> 0.2.17"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.pin-project-lite]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.2.16 -> 0.2.17"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[audits.pin-project-lite]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.2.16 -> 0.2.17"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[audits.pin-project-lite]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.2.16 -> 0.2.17"
notes = "No Rust source changes. Only Cargo.toml lint configuration and changelog updates for release immutability. Trusted publisher (taiki-e)."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.portable-atomic]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.11.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.portable-atomic]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "1.11.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.portable-atomic]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "1.11.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml"

[[audits.portable-atomic]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.11.1 -> 1.13.1"
notes = "Delta audit: three minor releases (1.12.0, 1.13.0, 1.13.1). New unsafe-assume-privileged feature for multi-core interrupt-disable fallback. SeqCst sequential consistency fix in lock-based fallback. x86_64 VMOVDQA detection simplified to AVX check. Arm support expanded to all 32-bit targets. PowerPC64 asm stabilized. Major interrupt module refactoring to RAII guard pattern. All unsafe changes reviewed: sound. No new ambient capabilities. Assisted-by: copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.portable-atomic]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.11.1 -> 1.13.1"
notes = "Delta: new arch asm ops (mips64, arm, x86_64 vmovdqa). Consistent with crate purpose. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.portable-atomic-util]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.2.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.portable-atomic-util]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.2.5"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.portable-atomic-util]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.2.5 -> 0.2.7"
notes = "Delta audit 0.2.5->0.2.7. Repo extracted from portable-atomic monorepo. Added optional serde feature for Arc/Weak. Build script version.rs inlined and simplified. Pointer provenance improved for CHERI. No new unsafe. No new ambient capabilities. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.postcard-derive]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.2.2"
notes = "Derive macros for MaxSize and Schema, no unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.postcard-rpc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.11.15"
notes = "Embedded RPC framework, minimal unsafe (Key::from_bytes, test stubs, 1 ptr::copy), no build script, no I/O. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.postcard-rpc]]
who = "Felipe Balbi <felipe@balbi.sh>"
criteria = "safe-to-run"
delta = "0.11.15 -> 0.12.1"
notes = "Continued evolution of the postcard RPC framework. Unsafe count remains low (Key::from_bytes, test stubs, a small number of ptr::copy for buffer marshaling). No build script. Optional tokio/tokio-serial transports are feature-gated and not enabled by default in this dependency graph (pico-de-gallo-lib uses the nusb transport). Assisted-by: opencode:claude-opus-4.7-1m-internal"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.postcard-schema]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.2.5"
notes = "Schema reflection for postcard types, 3 sound unsafe blocks in feature-gated code, no build script, no_std. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.pretty_assertions]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "1.4.1"
notes = "Full audit of pretty_assertions 1.4.1. Pure formatting/diff crate for test assertions. deny(unsafe_code) enforced, no unsafe blocks. No build script (build=false). No proc macros. No filesystem, network, or process access. Dependencies: diff (text diffing), yansi (ANSI colors). Behavior matches description. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro-crate]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "3.3.0"
notes = "Full: proc-macro crate path helper. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro-crate]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.2.1 -> 3.5.0"
notes = "Delta audit 1.2.1->3.5.0. Replaced once_cell/thiserror/toml deps with toml_edit; added workspace dependency support via cargo locate-project (std::process::Command on trusted CARGO env var, read-only). No unsafe code, build script explicitly disabled. Manual Error/Display/Debug impls replace thiserror. All changes consistent with crate purpose. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro-error]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro-error-attr2]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.0.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro-error2]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.0.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro-utils]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.10.0"
notes = "Proc macro utility library, no unsafe, no build script, no I/O. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.102"
notes = "Proc macro tokens by dtolnay. 6 unsafe for perf. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.102"
notes = "Proc macro tokens by dtolnay. 6 unsafe for perf. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "Delta: SourceFile removed, replaced by Span::file(). No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-fans/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "Delta: SourceFile removed, replaced by Span::file(). No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "Delta: SourceFile removed, replaced by Span::file(). No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "Delta: SourceFile removed, replaced by Span::file(). No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "Delta: SourceFile removed, replaced by Span::file(). No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "Delta: SourceFile removed, replaced by Span::file(). No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "Delta: SourceFile removed, replaced by Span::file(). No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "Delta: SourceFile removed. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "Delta: SourceFile removed. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "Delta: SourceFile removed. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "Delta: SourceFile removed. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "Delta: SourceFile removed. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.proc-macro2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "Delta: SourceFile removed. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.proptest]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "1.6.0"
notes = "Property testing. 7 unsafe for panic hook/RNG. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.proptest]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
version = "1.9.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.pulldown-cmark]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.9.3 -> 0.11.3"
notes = "Markdown parser evolution, unsafe reduced (SIMD escape.rs removed), build.rs is test codegen only (feature-gated). Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.quote]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.41"
notes = "Quasiquoting by dtolnay. No unsafe. build.rs probes rustc. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.quote]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.41"
notes = "Quasiquoting by dtolnay. No unsafe. build.rs probes rustc. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.quote]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.42"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.r-efi]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "5.2.0"
notes = "Full: UEFI type defs. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.r-efi]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
version = "5.3.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.radium]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.5.3 -> 0.7.0"
notes = "No unsafe, no proc macros. Build script reads TARGET env only. Delta adds if_atomic! macro, fetch_update method. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.rand]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.8.5 -> 0.9.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.rand_chacha]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.3.1 -> 0.9.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.rand_core]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.6.4 -> 0.9.3"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.rand_core]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.6.4 -> 0.9.3"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.rand_core]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.6.4 -> 0.9.5"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.rand_xorshift]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.3.0"
notes = "Full: simple xorshift RNG. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.rand_xorshift]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.1.1 -> 0.4.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.regex]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.11.1"
notes = "Regex by BurntSushi. 1 unsafe for Searcher impl. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.regex]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.11.1"
notes = "Regex by BurntSushi. 1 unsafe for Searcher impl. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.regex]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-run"
delta = "1.11.1 -> 1.12.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.regex-automata]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.4.9"
notes = "Regex engine by BurntSushi. 58 unsafe for DFA perf. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.regex-automata]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.4.9"
notes = "Regex engine by BurntSushi. 58 unsafe for DFA perf. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.regex-automata]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.4.13"
notes = "Regex engine by BurntSushi. Unsafe for DFA perf. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.regex-automata]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.4.13"
notes = "Regex engine by BurntSushi. Unsafe for DFA perf. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.regex-syntax]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.8.5 -> 0.8.8"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.regex-syntax]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.5 -> 0.8.10"
notes = "Delta audit: crate uses #![forbid(unsafe_code)], no build.rs, no proc macros, no powerful imports. Changes are cosmetic: inline format args migration, typo fixes in comments/docs, switched docsrs cfg to docsrs_regex, added Cargo include list, deleted shell test script, minor test additions for negated unicode property classes. No security-relevant changes. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.rstest]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.25.0"
notes = "Test fixtures. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.rstest]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-run"
delta = "0.22.0 -> 0.26.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.rstest_macros]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.25.0"
notes = "rstest proc macros. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.rstest_macros]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-run"
delta = "0.22.0 -> 0.26.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.rtos-trace]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.3"
notes = "Full: RTOS tracing traits. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.rtos-trace]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.3"
notes = "RTOS tracing traits. Unsafe FFI dispatch. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.rtt-target]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.6.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.rtt-target]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.6.1 -> 0.6.2"
notes = "Delta adds optional linker section attributes (section, section_cb) to rtt_init macros and support for pre-allocated uninitialized channels for FFI interop. One minor change in unsafe fn init: (*buffer).len() to (&(*buffer)).len() is functionally equivalent. No new unsafe blocks, no build script, no proc macros, no powerful imports. no_std crate. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.rustc-demangle]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.1.24 -> 0.1.25"
notes = "Delta: version bump, removed compiler_builtins. No code changes. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.rustc_version]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.3"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.rustix]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.38.44"
notes = "Safe POSIX syscall wrappers. Unsafe for syscall layer. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.rustix]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "1.0.5"
notes = "Safe Linux syscall wrappers. 1610 unsafe for syscall layer. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.rustix]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.38.32 -> 1.1.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.rustversion]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.20 -> 1.0.22"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.rustversion]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.20 -> 1.0.22"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.rusty-fork]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.3.0 -> 0.3.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.semver]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.9.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.semver]]
who = "Billy Price <williamp@microsoft.com>"
criteria = "safe-to-run"
delta = "1.0.26 -> 1.0.27"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.semver]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.0.27 -> 1.0.28"
notes = "Delta audit: edition bump 2018->2021, MSRV 1.61->1.68, let-else modernization, safer pointer ops in identifier.rs (ptr::addr_of!/cast replacing raw as casts). Benchmark migrated to criterion. No new unsafe, no new capabilities. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.semver-parser]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.serde]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.228"
notes = "Changes are mostly a reorganization of the internal module structure"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.serde_core]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.226"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.serde_derive]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.228"
notes = "Diff is clean-up in proc macros"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.serde_spanned]]
who = "jerrysxie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.6.8"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.serde_spanned]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.6.8 -> 0.6.9"
notes = "Trivial delta: metadata, lint config, and doc formatting only. No functional code changes, no unsafe, no build script, no I/O. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.slab]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.4.9"
notes = "Full: pre-allocated storage. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.slab]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.8 -> 0.4.11"
notes = "Delta 0.4.8->0.4.11: new get_disjoint_mut uses unsafe (MaybeUninit + raw ptrs) with sound bounds/overlap checks. build.rs removed. No powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.slab]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.4.11 -> 0.4.12"
notes = "Delta: try_remove() restructured to help compiler elide copies (same logic, reordered checks). Added SECURITY.md. No new unsafe code; existing unreachable!() guarded by occupied check. Assisted-by: copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.smbus-pec]]
who = "Matteo Tullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.ssmarshal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "1.0.0"
notes = "Binary serde marshaling, 13 unsafe blocks all bounds-checked before unchecked access. UNKNOWN publisher but attributable to Robigalia Project. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.stable_deref_trait]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.2.0 -> 1.2.1"
notes = """
Delta audit: metadata-only Cargo.toml changes (license format, explicit lib section).
src/lib.rs adds new unsafe impl StableDeref for Cow types - all sound since Cow::deref()
returns a stable heap or borrowed address across moves. Arc import and impls now correctly
gated behind target_has_atomic=ptr. No build script, no proc macros, no powerful imports.
Assisted-by: copilot-chat:claude-opus-4.6
"""
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.stable_deref_trait]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.2.0 -> 1.2.1"
notes = "Delta: adds unsafe impl StableDeref for Cow types, sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.stable_deref_trait]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.2.0 -> 1.2.1"
notes = "Adds sound unsafe StableDeref impls for Cow variants, atomic portability fix. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.static_cell]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.1.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.static_cell]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "2.1.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.static_cell]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "2.1.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml"

[[audits.static_cell]]
who = "jerrysxie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "2.1.0 -> 2.1.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.subenum]]
who = "Matteo Tullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.1.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.subenum]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.1.2 -> 1.2.0"
notes = "Delta audit 1.1.2->1.2.0. Proc-macro crate only. No unsafe code. syn 1->2 migration, replaced Extractor with syn Visit trait. Added const generics, associated type, parent-specific attr support. Generated code safe. No fs/net/process access. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.supports-unicode]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "3.0.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-platform-common/refs/heads/main/common/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.109"
notes = "Full: dtolnay Rust parser. Unsafe in buffer.rs cursor ptrs and parse.rs lifetime transmute. Sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.0.109"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.0.110"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.79"
notes = "Downgrade delta: refactored cursor code, expr types. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. Pre-existing unsafe in buffer.rs unchanged. No build script, no ambient capabilities. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. Pre-existing unsafe unchanged. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. Pre-existing unsafe unchanged. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. Pre-existing unsafe unchanged. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. Pre-existing unsafe unchanged. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. Pre-existing unsafe unchanged. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. Pre-existing unsafe unchanged. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.99"
notes = "Downgrade delta: parser logic adjustments. Pre-existing unsafe unchanged. No build script. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.100"
notes = "Downgrade delta: parser adjustments. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.100"
notes = "Downgrade delta: parser adjustments. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.101"
notes = "Downgrade delta: test-only changes. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.104"
notes = "Downgrade delta: const trait bound parsing changes. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-fans/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.104"
notes = "Downgrade delta: const trait bound parsing changes. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.104"
notes = "Downgrade delta: const trait bound parsing changes. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.104"
notes = "Downgrade delta: const trait bound parsing changes. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.104"
notes = "Downgrade delta: const trait bound parsing changes. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.104"
notes = "Downgrade delta: const trait bound parsing changes. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.104"
notes = "Downgrade delta: const trait bound parsing changes. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.104"
notes = "Downgrade delta: const trait bound parsing changes. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.104"
notes = "Downgrade delta: const trait bound parsing changes. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.104"
notes = "Downgrade delta: const trait bound parsing changes. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.104"
notes = "Downgrade delta: const trait bound parsing changes. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.104"
notes = "Downgrade delta: const trait bound parsing changes. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.109 -> 2.0.104"
notes = "Downgrade delta: const trait bound parsing changes. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.109"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-cfu/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.syn]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.110 -> 2.0.117"
notes = "Delta: no_std migration, receiver parsing fix. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.systemview-target]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.2"
notes = "Full: SEGGER SystemView FFI. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.systemview-target]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.2"
notes = "SEGGER SystemView FFI. build.rs uses bindgen+cc. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.tap]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.1"
notes = "No unsafe, no build.rs, no ambient I/O/process/network capabilities; behavior matches no_std tap/pipe/conv utility traits. Assisted-by: copilot-cli:GPT-5.3-Codex"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.tempfile]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "3.16.0 -> 3.23.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.0.17"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.68 -> 1.0.64"
notes = "Downgrade delta: MSRV change, build.rs probe cleanup. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.12 -> 1.0.68"
notes = "Cross-major delta v2-v1. v1 is simplification. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: build.rs generates versioned __private module. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-fans/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: build.rs generates versioned __private module. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: build.rs generates versioned __private module. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: build.rs generates versioned __private module. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: simplifies build.rs OUT_DIR codegen. No unsafe. Build script limited to OUT_DIR and rustc probes. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: simplifies build.rs. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: simplifies build.rs. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: simplifies build.rs. No unsafe. Build script limited to OUT_DIR. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: build.rs match-to-let-else refactor. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: build.rs match-to-let-else refactor. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-cfu/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: build.rs match-to-let-else refactor. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: build.rs match-to-let-else refactor. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: build.rs match-to-let-else refactor. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: build.rs match-to-let-else refactor. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: build.rs match-to-let-else refactor. No new unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.0.17"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.68 -> 1.0.64"
notes = "Downgrade delta: removes scan_expr, simplifies format parsing. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.12 -> 1.0.68"
notes = "Cross-major delta v2-v1. v1 simpler. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: __private module refactor. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-fans/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: __private module refactor. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: __private module refactor. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: __private module refactor. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: __private module refactor. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: __private module refactor. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: removes versioned __privateN module path. No unsafe. Proc-macro generates safe code. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.12"
notes = "Downgrade delta: removes versioned __privateN module path. No unsafe. Proc-macro generates safe code. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: conditional clippy lint allows. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: conditional clippy lint allows. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-cfu/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: conditional clippy lint allows. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: conditional clippy lint allows. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: conditional clippy lint allows. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: conditional clippy lint allows. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.thiserror-impl]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "2.0.17 -> 2.0.18"
notes = "Delta: conditional clippy lint allows. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.thread_local]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.1.4 -> 1.1.9"
notes = "No build script, no FS/net/process capability expansion; unsafe refactor to lock-free insertion and nightly TLS path appears sound on review. Assisted-by: copilot-cli:GPT-5.3-Codex"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "1.45.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Felipe Balbi <felipe@balbi.sh>"
criteria = "safe-to-run"
version = "1.52.3"
notes = "Async runtime. The existing [[trusted.tokio]] entry covers releases published by user 6741 (Alice Ryhl); this specific 1.52.3 release isn't covered by that trust window so add an explicit audit. tokio's capability surface is broad (process spawn, fs, signal, net) but only what's enabled by features matters: tmp108's dev-dep enables `rt`, `macros`, `rt-multi-thread`, `time` only - no `fs`, `net`, `process`, `signal`. unsafe usage is extensive but expected for an async runtime (intrusive lists, atomics, thread-local state); no build script. Assisted-by: opencode:claude-opus-4.7-1m-internal"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.45.0 -> 1.46.1"
notes = "Delta: timer refactor, biased mode, SpawnLocation. Unsafe improvements. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.45.0 -> 1.47.1"
notes = "Delta audit. New SetOnce sync primitive, OwnedNotified, spawn location tracking (tokio_unstable), experimental io_uring behind cfg gate, block_in_place hardening. All new unsafe follows existing patterns with safety comments. No build script, no proc macros. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-run"
delta = "1.45.0 -> 1.51.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.51.1 -> 1.52.1"
notes = "Delta: io-uring File read, eager driver handoff, trace_with API. All new unsafe is sound. No new deps. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25773/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.51.1 -> 1.52.1"
notes = "Delta: io-uring read, eager driver handoff. All unsafe sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.51.1 -> 1.52.1"
notes = "Delta: io-uring read, eager driver handoff. All unsafe sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.51.1 -> 1.52.1"
notes = "Delta: io-uring read, eager driver handoff. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.51.1 -> 1.52.1"
notes = "Delta: io-uring read, eager driver handoff. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.51.1 -> 1.52.1"
notes = "Delta: io-uring read, eager driver handoff. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.51.1 -> 1.52.3"
notes = "Delta audit 1.51.1->1.52.3: LIFO slot stealing reverted for perf, io_uring AsyncRead for File, eager driver handoff (unstable), trace_with API (unstable), mpsc len/permit/try_recv fixes, RwLock max_readers=0 panic, AioSource I/O safety. Unsafe changes in io_uring read path and trace_with lifetime erasure are sound. No new ambient capabilities. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.51.1 -> 1.52.3"
notes = "Delta: io-uring read, eager driver handoff, trace_with API. All unsafe sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.51.1 -> 1.52.3"
notes = "Delta: io-uring read, eager driver handoff, trace_with API. All unsafe sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.51.1 -> 1.52.3"
notes = "Delta: io-uring read, eager driver handoff, trace_with API. All unsafe sound. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.51.1 -> 1.52.3"
notes = "Delta: io-uring read, eager driver handoff, trace_with API. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.51.1 -> 1.52.3"
notes = "Delta: io-uring read, eager driver handoff, trace_with API. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.51.1 -> 1.52.3"
notes = "Delta: io-uring read, eager driver handoff, trace_with API. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio-macros]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "2.5.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio-macros]]
who = "Felipe Balbi <felipe@balbi.sh>"
criteria = "safe-to-run"
version = "2.7.0"
notes = "Proc-macro crate providing #[tokio::main] / #[tokio::test] - the only entry points the dev-deps use. Zero unsafe, no build script, no I/O - pure token manipulation. Assisted-by: opencode:claude-opus-4.7-1m-internal"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.tokio-macros]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-run"
delta = "2.5.0 -> 2.7.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.toml]]
who = "jerrysxie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.8.22"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.toml]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.22 -> 0.8.23"
notes = "Delta: adds TupleVariant/StructVariant serialization support. All new code is thin wrappers delegating to toml_edit. No unsafe (forbid(unsafe_code)), no build script, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.toml_datetime]]
who = "jerrysxie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.6.9"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.toml_datetime]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.6.9 -> 0.6.11"
notes = "Delta 0.6.9->0.6.11: parser refactored from char-by-char to lexer-based tokenizer with improved error messages; no unsafe (forbid(unsafe_code)), no build script, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.toml_datetime]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.7.5+spec-1.1.0 -> 1.1.1+spec-1.1.0"
notes = "Delta audit: edition bump (2021->2024), MSRV bump, Time::second/nanosecond made Optional for TOML spec compliance, error trait impls simplified to core::error::Error, dep version bumps. No unsafe code, no build script, no ambient capabilities. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.toml_edit]]
who = "jerrysxie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.22.26"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.toml_edit]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.22.26 -> 0.22.27"
notes = "Delta: no changes to unsafe code (all pre-existing from_utf8_unchecked on ASCII-validated buffers). Visibility reductions on parser internals, serializer refactoring, new consuming accessors. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.toml_edit]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.22.27 -> 0.25.11+spec-1.1.0"
notes = "Delta audit 0.22.27 to 0.25.11+spec-1.1.0. Major refactor: parser extracted to new toml_parser crate, serde replaced with serde_core, InternalString removed (replaced with plain String), ImDocument renamed to Document, SpannedDeserializer moved to serde_spanned, toml_write renamed to toml_writer, deprecated APIs removed. All existing unsafe code was removed (moved to toml_parser); no new unsafe added. No build.rs, no proc macros, no filesystem/network/process access. Edition bumped from 2021 to 2024. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.toml_parser]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "1.1.2+spec-1.1.0"
notes = "Full audit of toml_parser 1.1.2+spec-1.1.0. Format-preserving TOML lexer/parser, no_std by default. No build script, no proc macros, no filesystem/network/process access, no FFI. All unsafe code is gated behind an opt-in 'unsafe' feature flag; by default the crate uses #![forbid(unsafe_code)]. When enabled, unsafe is limited to performance optimizations (get_unchecked, next_slice_unchecked on known-valid UTF-8 boundaries) with safe fallbacks. Dependencies: winnow (parser combinator, no_std); anstream/anstyle (optional, debug feature only). RecursionGuard prevents stack exhaustion from deeply nested input. Code matches advertised purpose. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.tracing]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.1.41 -> 0.1.44"
notes = "Delta audit: one new unsafe (FieldName::as_str using str::from_utf8_unchecked) — sound because private field is only constructed from const fn new() which processes &str input by removing r#, preserving UTF-8 validity; compile-time assert guards N. No build script (build=false). No proc macros. No powerful imports (fs/net/process). Key changes: valueset! macro split into valueset!/valueset_all! to fix record_all panic (#3432); FieldName added for raw identifier support; stdlib.rs removed in favor of #![no_std] + extern crate std; lifetime elision cleanup; doc fixes; MSRV 1.63→1.65. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.tracing-attributes]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.1.28 -> 0.1.30"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.tracing-attributes]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.1.30 -> 0.1.31"
notes = "Delta audit 0.1.30->0.1.31: Proc macro crate. Adds support for constant expression field names in #[instrument(fields(...))] via new FieldName::Expr variant. No unsafe code. No build script. No new dependencies. No filesystem/network/process access. Removes dead code (AsyncTraitBlockReplacer). Generated code is safe - wraps user expressions in braces for tracing span fields. Comprehensive tests added. Assisted-by: copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.tracing-attributes]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.1.30 -> 0.1.31"
notes = "Added support for constant expressions as instrument field names. New FieldName enum. Removed dead code AsyncTraitBlockReplacer. Proc macro only. Trusted publisher (hds from Tokio team)."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.tracing-core]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.1.33 -> 0.1.34"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.tracing-core]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.1.34 -> 0.1.36"
notes = "Delta audit: major refactor replacing crate::stdlib shim with direct alloc::/core::/std:: imports and unconditional #![no_std]. Removed stdlib.rs, added sync.rs (extracted Mutex wrapper). New Values::All enum variant for efficient ValueSet construction (value_set_all, #[doc(hidden)]). Two downcast_raw calls wrapped in unsafe blocks (sound - type ID checked first). No new unsafe patterns, no build script, no proc macros, no filesystem/network access. No new dependencies. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.tracing-core]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.1.34 -> 0.1.36"
notes = "Fix record_all panic. Switch to unconditional no_std (removed stdlib.rs shim). Improved code generation at trace points. Extracted sync Mutex wrapper. Trusted publisher (hds from Tokio team)."
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[audits.tracing-log]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.1.3 -> 0.2.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.tracing-subscriber]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.3.20 -> 0.3.23"
notes = "Delta audit of tracing-subscriber 0.3.20->0.3.23. Changes: (1) no_std support refactoring - imports moved from std to alloc/core, unconditional #![no_std] with extern crate std gated on feature; (2) ANSI sanitization made configurable via with_ansi_sanitization(bool), defaulting to true (secure default preserved); (3) Escape renamed to EscapeGuard with conditional sanitize flag; (4) downcast_raw calls wrapped in unsafe blocks to match trait signature change in tracing-core 0.1.35 - all call sites forward to existing safe implementations; (5) Registry enter/exit simplified - removes clone_span on enter and try_close on exit for performance; (6) Layered now propagates on_register_dispatch to inner+layer; (7) Doc fixes and test improvements. No new filesystem/network/process access. No build script. No proc macros. Unsafe changes are mechanical wrapping of existing downcast_raw calls. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.trait-variant]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.1.2"
notes = "Proc macro for trait variants, no unsafe, no build script, pure token manipulation. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[audits.typenum]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.18.0"
notes = "Pure no_std type-level numbers crate. forbid(unsafe_code) -- zero unsafe anywhere. Build script only writes generated test code to OUT_DIR. No proc macros, no FFI, no network/filesystem/process access in library. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.typenum]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.18.0 -> 1.20.0"
notes = "Delta audit. build.rs removed (improvement). Adds tuple indexing, Binary fmt, ToInt for isize/i128/u128, 2^N-1 constants. No unsafe code (forbid). No build script, no proc macros, no powerful imports. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.ufmt-write]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.unarray]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
version = "0.1.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.20"
notes = "Unicode identifier tables by dtolnay. 2 unsafe for table lookup. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.20"
notes = "Unicode identifier tables by dtolnay. 2 unsafe for table lookup. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16->17 table data update only. No unsafe, no build.rs, no new deps. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. No unsafe, pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. No unsafe, pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-cfu/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. No unsafe, pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. No unsafe, pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. No unsafe, pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. No unsafe, pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mimxrt685s-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. No unsafe, pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. No unsafe, pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. Pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-regulator/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. Pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. Pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. Pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/lis2dw12-i2c/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. Pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.unicode-ident]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16.0->17.0 table update. Pure data. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.unty]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.0.4"
notes = "Tiny no_std crate (1 file, ~120 LOC, zero deps). Two unsafe blocks: transmute_copy guarded by TypeId check in unty(), and a dtolnay-pattern transmute in non_static_type_id(). Both documented; no build script, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.usb-device]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.3.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.uuid]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.17.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.uuid]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.23.1"
notes = "Full: UUID per RFC 9562. Minimal unsafe: repr(transparent) transmute, NonZeroU128. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/ffa/refs/heads/main/supply-chain/audits.toml"

[[audits.valuable]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.1"
notes = "No unsafe code; build.rs only sets target atomic cfg via env; no fs/net/process capability use observed; behavior matches value-inspection purpose. Assisted-by: copilot-cli:GPT-5.3-Codex"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.vcell]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.1.3"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.version_check]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.9.4 -> 0.9.5"
notes = "Delta 0.9.4->0.9.5: documentation-only changes (added feature detection guidance, doc cross-references) and Cargo.toml normalization. No code changes, no unsafe, no new imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.virtue]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.0.18"
notes = "Proc-macro derive helper library. No unsafe code, no build script. Uses std::fs/std::env only in opt-in export_to_file() debug helper scoped to target/ dir. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.volatile-register]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.2.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.wait-timeout]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.2.0 -> 0.2.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.wasi]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.11.0+wasi-snapshot-preview1"
notes = "WASI preview1 FFI bindings. Auto-generated. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.wasi]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.11.1+wasi-snapshot-preview1"
notes = "Auto-generated WASI snapshot-preview1 bindings from Bytecode Alliance. no_std, no build script, zero runtime deps. Unsafe limited to FFI wrappers for WASI host calls and unreachable_unchecked in exhaustive enum match arms. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.wasi]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.14.2+wasi-0.2.4"
notes = "WASI preview2 component model bindings. Auto-generated. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.wasip2]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
version = "1.0.1+wasi-0.2.4"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.windows-link]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.2.0 -> 0.2.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.windows-sys]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.0"
notes = "Auto-generated Windows API FFI by Microsoft. No unsafe blocks. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows-sys]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.59.0"
notes = "Auto-generated Windows API FFI by Microsoft. No unsafe blocks. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows-sys]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.59.0"
notes = "Auto-generated Windows API FFI. No unsafe blocks, no build script. Microsoft (kennykerr). Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/is31fl3743b/refs/heads/main/supply-chain/audits.toml"

[[audits.windows-sys]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-run"
version = "0.59.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[audits.windows-sys]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-run"
version = "0.59.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[audits.windows-sys]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
version = "0.61.2"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.windows-targets]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows link macro. No unsafe. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows-targets]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows link macro. No unsafe. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows-targets]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows link macro. No unsafe, no build.rs. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows-targets]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows link macro. No unsafe, no build.rs. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows-targets]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.52.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_aarch64_gnullvm]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_aarch64_gnullvm]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_aarch64_gnullvm]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_aarch64_gnullvm]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_aarch64_gnullvm]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.52.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_aarch64_msvc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_aarch64_msvc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_aarch64_msvc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_aarch64_msvc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_aarch64_msvc]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.52.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_gnu]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_gnu]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_gnu]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.52.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_gnu]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_gnu]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_gnu]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.52.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_gnullvm]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_gnullvm]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_gnullvm]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.52.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_msvc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_msvc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_msvc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_msvc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_i686_msvc]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.52.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_gnu]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_gnu]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_gnu]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_gnu]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_gnu]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.52.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_gnullvm]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_gnullvm]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_gnullvm]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_gnullvm]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_gnullvm]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.52.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_msvc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_msvc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.48.5"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_msvc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_msvc]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.52.6"
notes = "Windows import library. Trivial build.rs sets link-search. Microsoft. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/systemview-tracing/refs/heads/main/supply-chain/audits.toml"

[[audits.windows_x86_64_msvc]]
who = "Robert Zieba <robertzieba@microsoft.com>"
criteria = "safe-to-run"
version = "0.52.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.winnow]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.6.24"
notes = "Direct audit of 0.6.24. Contains fewer unsafe stream APIs than 0.7.10. Retains 4 sound unsafe blocks: 2 repr(transparent) transmutes, 2 from_utf8_unchecked on ASCII-only bytes. No build script, no proc macros. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.winnow]]
who = "jerrysxie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.7.10"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.winnow]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.7.10 -> 0.7.13"
notes = "Delta adds Accumulate impls (Cow str, String, VecDeque), fixes macro PartialEq/PartialOrd, optimizes str::next_token, adds tests, improves docs. No unsafe changes, no build script, no new powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.winnow]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.7.13 -> 0.7.15"
notes = "Delta 0.7.13->0.7.15: Removes internal lib::std facade (mechanical s/crate::lib::std/core|alloc|std/), adds expression() Pratt parser (~569 lines) and unordered_seq! macro (~592 lines, replaces deprecated permutation). No unsafe changes (existing 4 sound blocks unchanged). No build script, no proc macros, no new powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.winnow]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "0.7.15 -> 1.0.2"
notes = "Delta 0.7.15->1.0.2: Major version bump with API-breaking changes only. Replaces (Input,usize) bit-stream tuple with named Bits struct, refactors escaped/take_escaped control_char from char to generic Parser, changes iterator() to take &mut Input, adds ParseIter for parse_iter(), restructures features (new parser/ascii/binary gates), removes deprecated permutation/escaped_transform, reduces alt tuple max from 22 to 10, consolidates PhantomData fields, moves Needed to stream module. No unsafe code in diff. No build script, no proc macros, no filesystem/network/process access. Assisted-by: copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.winnow]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
delta = "1.0.2 -> 1.0.3"
notes = "Delta: removed 2 unsafe from_utf8_unchecked calls, replaced with safe from_utf8. Removed unnecessary AsBStr trait bounds from float parsers. Strict safety improvement. Assisted-by: copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.wit-bindgen]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
version = "0.46.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.wyz]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.5.1"
notes = "Pointer abstraction unsafe in comu.rs delegates to std NonNull ops. wm.rs Send/Sync behind Mutex/RwLock (std+garbage only). Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.yaml-rust2]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.9.0"
notes = "Pure YAML parser, no unsafe, no build script, no proc macros. Reviewed version 0.9.0 directly; differences from 0.10.x are minor: hashlink dep range, MSRV, emitter quoting list, scanner reserve(), float parsing guard. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.yansi]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "1.0.1"
notes = "Full audit of yansi 1.0.1 (ANSI terminal color painting library). No build script, no proc macros, no filesystem/network/process access. Two unsafe areas: (1) AtomicCondition::read() uses transmute to roundtrip fn-ptr through AtomicPtr -- sound given fn() -> bool and *mut () are same size/repr; (2) Windows FFI in windows.rs calls CreateFileW/GetConsoleMode/SetConsoleMode to enable VT processing -- standard console API usage, sound. Only dependency is optional is-terminal. Behavior matches advertised purpose. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.8.24"
notes = "Zero-copy by Google. 365 unsafe for transmute/pointer. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy]]
who = "Matteo Tullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.8.26"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.8.14 -> 0.8.31"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.25 -> 0.8.26"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.25 -> 0.8.26"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.27 -> 0.8.48"
notes = "Delta audit 0.8.27->0.8.48. Large refactor (34K lines, 648 files) but bulk is benchmarks, agent docs, UI test stderr, and CI scripts. Core changes: (1) build.rs inverted cfg logic (emit cfg if version < threshold) with new cfgs for x86 AVX-512 and aarch64 big-endian SIMD - still only reads env vars and emits cargo:rustc-cfg, no I/O. (2) Pointer module refactored cast system from ad-hoc PtrInner::cast into trait-based Project/Cast/CastExact with thorough SAFETY comments. (3) impls.rs simplified atomic/Cell/UnsafeCell transmute patterns, added tuple trait impls up to 26 elements with HasField/ProjectField. (4) Error types gained Clone/PartialEq/Eq impls, field renames. (5) Macros updated for Sized->unsized transmute_ref!/transmute_mut! support. (6) New ReadOnly wrapper type. No new ambient capabilities, no proc macros in this crate. All unsafe code has SAFETY comments citing specific Rust documentation versions. No build script I/O beyond cargo:rustc-cfg. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.27 -> 0.8.48"
notes = "Delta: field projection, SIMD types, build.rs cfg inversion. Bulk is tests. No new deps. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.27 -> 0.8.48"
notes = "Delta: field projection, SIMD types. Bulk is tests. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.27 -> 0.8.48"
notes = "Delta: field projection, SIMD types. Bulk is tests. No new deps. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy-derive]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-run"
version = "0.8.24"
notes = "Zerocopy derive by Google. Generates unsafe trait impls. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy-derive]]
who = "Matteo Tullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.8.26"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy-derive]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-run"
delta = "0.8.14 -> 0.8.31"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy-derive]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.25 -> 0.8.26"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy-derive]]
who = "matteotullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.25 -> 0.8.26"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy-derive]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.27 -> 0.8.48"
notes = "Delta audit. Major refactor into derive/ modules and util.rs. No build.rs. No fs/net in proc-macro. All unsafe in generated code with SAFETY docs. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy-derive]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.27 -> 0.8.48"
notes = "Delta: proc macro only, generated unsafe is trait impls. No new deps. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy-derive]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.27 -> 0.8.48"
notes = "Delta: proc macro only, generated unsafe is trait impls. No new deps. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[audits.zerocopy-derive]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "0.8.27 -> 0.8.48"
notes = "Delta: proc macro, generated unsafe is trait impls. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-utilities/refs/heads/main/supply-chain/audits.toml"

[[trusted.aho-corasick]]
criteria = "safe-to-deploy"
user-id = 189
start = "2019-03-28"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.aho-corasick]]
criteria = "safe-to-deploy"
user-id = 189
start = "2019-03-28"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.aho-corasick]]
criteria = "safe-to-run"
user-id = 189
start = "2019-03-28"
end = "2027-04-07"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[trusted.anstream]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2023-03-16"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.anstyle]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2022-05-18"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.anstyle-parse]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2023-03-08"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.anstyle-query]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2023-04-13"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.anstyle-wincon]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2023-03-08"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.anyhow]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-10-05"
end = "2026-04-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.anyhow]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-10-05"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.anyhow]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-10-05"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.anyhow]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-10-05"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.autocfg]]
criteria = "safe-to-deploy"
user-id = 539
start = "2019-05-22"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.backtrace]]
criteria = "safe-to-deploy"
user-id = 55123
start = "2025-05-06"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.backtrace]]
criteria = "safe-to-deploy"
user-id = 55123
start = "2025-05-06"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.bitflags]]
criteria = "safe-to-deploy"
user-id = 3204
start = "2019-05-02"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.bitflags]]
criteria = "safe-to-deploy"
user-id = 3204
start = "2019-05-02"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.bitflags]]
criteria = "safe-to-deploy"
user-id = 3204
start = "2019-05-02"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.bytes]]
criteria = "safe-to-run"
user-id = 6741
start = "2021-01-11"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.cc]]
criteria = "safe-to-deploy"
user-id = 55123
start = "2022-10-29"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.cc]]
criteria = "safe-to-run"
user-id = 55123
start = "2022-10-29"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.cfg-if]]
criteria = "safe-to-deploy"
user-id = 55123
start = "2025-06-09"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.cfg-if]]
criteria = "safe-to-deploy"
user-id = 55123
start = "2025-06-09"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.clap]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2021-12-08"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.clap_builder]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2023-03-28"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.clap_lex]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2022-04-15"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.colorchoice]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2023-04-13"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.dd-manifest-tree]]
criteria = "safe-to-deploy"
user-id = 85562
start = "2024-11-10"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.dd-manifest-tree]]
criteria = "safe-to-deploy"
user-id = 85562
start = "2024-11-10"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.deranged]]
criteria = "safe-to-deploy"
user-id = 15682
start = "2020-12-10"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.device-driver]]
criteria = "safe-to-deploy"
user-id = 85562
start = "2020-09-28"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.device-driver]]
criteria = "safe-to-deploy"
user-id = 85562
start = "2020-09-28"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.device-driver-generation]]
criteria = "safe-to-deploy"
user-id = 85562
start = "2024-01-07"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.device-driver-generation]]
criteria = "safe-to-deploy"
user-id = 85562
start = "2024-01-07"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.device-driver-macros]]
criteria = "safe-to-deploy"
user-id = 85562
start = "2024-01-07"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.device-driver-macros]]
criteria = "safe-to-deploy"
user-id = 85562
start = "2024-01-07"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.find-msvc-tools]]
criteria = "safe-to-run"
user-id = 539
start = "2025-08-29"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.goblin]]
criteria = "safe-to-deploy"
user-id = 4103
start = "2019-04-14"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.indexmap]]
criteria = "safe-to-deploy"
user-id = 539
start = "2020-01-15"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.indoc]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-04-28"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.is-terminal]]
criteria = "safe-to-deploy"
user-id = 6825
start = "2022-01-22"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.is_terminal_polyfill]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2024-05-02"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.itoa]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-05-02"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.itoa]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-05-02"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.js-sys]]
criteria = "safe-to-deploy"
user-id = 1
start = "2019-03-04"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.libc]]
criteria = "safe-to-deploy"
user-id = 55123
start = "2024-08-15"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.libc]]
criteria = "safe-to-deploy"
user-id = 55123
start = "2024-08-15"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.libc]]
criteria = "safe-to-deploy"
user-id = 55123
start = "2024-08-15"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.libc]]
criteria = "safe-to-deploy"
user-id = 55123
start = "2024-08-15"
end = "2026-10-09"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.libc]]
criteria = "safe-to-run"
user-id = 55123
start = "2019-01-01"
end = "2027-04-07"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[trusted.linkme]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-08-18"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.linkme-impl]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-08-18"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.linux-raw-sys]]
criteria = "safe-to-run"
user-id = 6825
start = "2021-06-12"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.lock_api]]
criteria = "safe-to-deploy"
user-id = 2915
start = "2019-05-04"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.lock_api]]
criteria = "safe-to-run"
user-id = 2915
start = "2019-05-04"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.log]]
criteria = "safe-to-deploy"
user-id = 3204
start = "2019-07-10"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.log]]
criteria = "safe-to-deploy"
user-id = 3204
start = "2019-07-10"
end = "2027-05-26"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/odp-secure-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.loom]]
criteria = "safe-to-deploy"
user-id = 6741
start = "2021-04-12"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.loom]]
criteria = "safe-to-run"
user-id = 6741
start = "2020-01-01"
end = "2027-04-07"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[trusted.loom]]
criteria = "safe-to-run"
user-id = 6741
start = "2021-04-12"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.mach2]]
criteria = "safe-to-run"
user-id = 51017
start = "2021-11-15"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.memchr]]
criteria = "safe-to-deploy"
user-id = 189
start = "2019-07-07"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.memchr]]
criteria = "safe-to-deploy"
user-id = 189
start = "2019-07-07"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.memchr]]
criteria = "safe-to-deploy"
user-id = 189
start = "2019-07-07"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.memchr]]
criteria = "safe-to-deploy"
user-id = 189
start = "2019-07-07"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.memchr]]
criteria = "safe-to-deploy"
user-id = 189
start = "2019-07-07"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.memchr]]
criteria = "safe-to-run"
user-id = 189
start = "2019-07-07"
end = "2027-04-07"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[trusted.num]]
criteria = "safe-to-deploy"
user-id = 539
start = "2020-01-10"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.num-bigint]]
criteria = "safe-to-deploy"
user-id = 539
start = "2019-09-04"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.num-complex]]
criteria = "safe-to-deploy"
user-id = 539
start = "2019-06-10"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.num-rational]]
criteria = "safe-to-deploy"
user-id = 539
start = "2019-06-11"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.object]]
criteria = "safe-to-run"
user-id = 4415
start = "2019-04-26"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.object]]
criteria = "safe-to-run"
user-id = 4415
start = "2019-04-26"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.once_cell_polyfill]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2025-05-22"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.paste]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-03-19"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.paste]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-03-19"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.paste]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-03-19"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.predicates]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2019-04-22"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.predicates-core]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2020-12-29"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.predicates-tree]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2020-12-29"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.prettyplease]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2022-01-04"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.prettyplease]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2022-01-04"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.prettyplease]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2022-01-04"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.proc-macro2]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-04-23"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.proc-macro2]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-04-23"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.proc-macro2]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-04-23"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.proc-macro2]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-04-23"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.proc-macro2]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-04-23"
end = "2026-11-07"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[trusted.proc-macro2]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-04-23"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.quote]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-04-09"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.quote]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-04-09"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.quote]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-04-09"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.quote]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-04-09"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.rayon]]
criteria = "safe-to-deploy"
user-id = 539
start = "2019-06-13"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.rayon-core]]
criteria = "safe-to-deploy"
user-id = 539
start = "2019-06-13"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.regex]]
criteria = "safe-to-run"
user-id = 189
start = "2019-02-27"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.regex-automata]]
criteria = "safe-to-deploy"
user-id = 189
start = "2019-02-25"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.regex-automata]]
criteria = "safe-to-deploy"
user-id = 189
start = "2019-02-25"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.regex-automata]]
criteria = "safe-to-run"
user-id = 189
start = "2019-02-25"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.regex-syntax]]
criteria = "safe-to-run"
user-id = 189
start = "2019-03-30"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.regex-syntax]]
criteria = "safe-to-run"
user-id = 189
start = "2019-03-30"
end = "2027-04-07"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[trusted.rustc-demangle]]
criteria = "safe-to-deploy"
user-id = 55123
start = "2023-03-23"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.rustc-demangle]]
criteria = "safe-to-deploy"
user-id = 55123
start = "2023-03-23"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.rustc-demangle]]
criteria = "safe-to-deploy"
user-id = 55123
start = "2023-03-23"
end = "2027-04-17"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.rustix]]
criteria = "safe-to-run"
user-id = 6825
start = "2021-10-29"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.rustversion]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-07-08"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.rustversion]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-07-08"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.ryu]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-05-02"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.ryu]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-05-02"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.ryu]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-05-02"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.scoped-tls]]
criteria = "safe-to-deploy"
user-id = 1
start = "2019-02-26"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.scopeguard]]
criteria = "safe-to-deploy"
user-id = 2915
start = "2020-02-16"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.scopeguard]]
criteria = "safe-to-run"
user-id = 2915
start = "2020-02-16"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.scroll]]
criteria = "safe-to-deploy"
user-id = 4103
start = "2019-10-24"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.scroll_derive]]
criteria = "safe-to-deploy"
user-id = 4103
start = "2019-10-24"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.semver]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2021-05-25"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.semver]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2021-05-25"
end = "2026-11-07"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[trusted.serde]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-03-01"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.serde_core]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2025-09-13"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.serde_derive]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-03-01"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.serde_json]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-02-28"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.serde_json]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-02-28"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.serde_json]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-02-28"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.serde_json]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-02-28"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.serde_json]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-02-28"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.serde_yaml]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-05-02"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.smallvec]]
criteria = "safe-to-deploy"
user-id = 2017
start = "2019-10-28"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.syn]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-03-01"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.syn]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-03-01"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.syn]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-03-01"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.syn]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-03-01"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.syn]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-03-01"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.termtree]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2021-10-07"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.thiserror]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-10-09"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.thiserror]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-10-09"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.thiserror]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-10-09"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.thiserror]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-10-09"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.thiserror-impl]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-10-09"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.thiserror-impl]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-10-09"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.thiserror-impl]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-10-09"
end = "2026-09-04"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.thiserror-impl]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2019-10-09"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.thread_local]]
criteria = "safe-to-run"
user-id = 2915
start = "2019-01-01"
end = "2027-04-07"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[trusted.time]]
criteria = "safe-to-deploy"
user-id = 15682
start = "2019-12-19"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.time-core]]
criteria = "safe-to-deploy"
user-id = 15682
start = "2020-12-17"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.time-macros]]
criteria = "safe-to-deploy"
user-id = 15682
start = "2019-12-02"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.tokio]]
criteria = "safe-to-run"
user-id = 6741
start = "2020-12-25"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.toml_datetime]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2022-10-21"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.toml_edit]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2023-01-01"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.toml_edit]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2023-01-01"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.toml_parser]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2025-07-08"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.toml_write]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2025-04-25"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.ucd-trie]]
criteria = "safe-to-run"
user-id = 189
start = "2019-07-21"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.unicode-ident]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2021-10-02"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.unicode-ident]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2021-10-02"
end = "2026-11-07"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[trusted.unicode-ident]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2021-10-02"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.unicode-ident]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2021-10-02"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.unicode-ident]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2021-10-02"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.unsafe-libyaml]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2022-07-03"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.uuid]]
criteria = "safe-to-deploy"
user-id = 3204
start = "2019-10-18"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.walkdir]]
criteria = "safe-to-deploy"
user-id = 189
start = "2019-06-09"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.wasi]]
criteria = "safe-to-deploy"
user-id = 1
start = "2020-06-03"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.wasip2]]
criteria = "safe-to-run"
user-id = 1
start = "2025-09-09"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.wasm-bindgen]]
criteria = "safe-to-deploy"
user-id = 1
start = "2019-03-04"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.wasm-bindgen-backend]]
criteria = "safe-to-deploy"
user-id = 1
start = "2019-03-04"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.wasm-bindgen-macro]]
criteria = "safe-to-deploy"
user-id = 1
start = "2019-03-04"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.wasm-bindgen-macro-support]]
criteria = "safe-to-deploy"
user-id = 1
start = "2019-03-04"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.wasm-bindgen-shared]]
criteria = "safe-to-deploy"
user-id = 1
start = "2019-03-04"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.web-sys]]
criteria = "safe-to-deploy"
user-id = 1
start = "2019-03-04"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.winapi-util]]
criteria = "safe-to-run"
user-id = 189
start = "2020-01-11"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-01-15"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows]]
criteria = "safe-to-run"
user-id = 64539
start = "2021-01-15"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-collections]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2025-02-06"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-collections]]
criteria = "safe-to-run"
user-id = 64539
start = "2025-02-06"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-core]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-11-15"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-core]]
criteria = "safe-to-run"
user-id = 64539
start = "2021-11-15"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-future]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2025-02-10"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-future]]
criteria = "safe-to-run"
user-id = 64539
start = "2025-02-10"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-implement]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2022-01-27"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-implement]]
criteria = "safe-to-run"
user-id = 64539
start = "2022-01-27"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-interface]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2022-02-18"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-interface]]
criteria = "safe-to-run"
user-id = 64539
start = "2022-02-18"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-link]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2024-07-17"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-link]]
criteria = "safe-to-run"
user-id = 64539
start = "2024-07-17"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-numerics]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2023-05-15"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-numerics]]
criteria = "safe-to-run"
user-id = 64539
start = "2023-05-15"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-result]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2024-02-02"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-result]]
criteria = "safe-to-run"
user-id = 64539
start = "2024-01-01"
end = "2027-04-07"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-result]]
criteria = "safe-to-run"
user-id = 64539
start = "2024-02-02"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-strings]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2024-02-02"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-strings]]
criteria = "safe-to-run"
user-id = 64539
start = "2024-02-02"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-sys]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-11-15"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-sys]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-11-15"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-sys]]
criteria = "safe-to-run"
user-id = 64539
start = "2021-11-15"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-targets]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2022-09-09"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-targets]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2022-09-09"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-targets]]
criteria = "safe-to-run"
user-id = 64539
start = "2022-09-09"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-threading]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2025-04-29"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows-threading]]
criteria = "safe-to-run"
user-id = 64539
start = "2025-04-29"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_aarch64_gnullvm]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2022-09-01"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_aarch64_gnullvm]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2022-09-01"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_aarch64_gnullvm]]
criteria = "safe-to-run"
user-id = 64539
start = "2022-09-01"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_aarch64_msvc]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-11-05"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_aarch64_msvc]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-11-05"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_aarch64_msvc]]
criteria = "safe-to-run"
user-id = 64539
start = "2021-11-05"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_i686_gnu]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-10-28"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_i686_gnu]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-10-28"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_i686_gnu]]
criteria = "safe-to-run"
user-id = 64539
start = "2021-10-28"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_i686_gnullvm]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2024-04-02"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_i686_gnullvm]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2024-04-02"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_i686_msvc]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-10-27"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_i686_msvc]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-10-27"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_i686_msvc]]
criteria = "safe-to-run"
user-id = 64539
start = "2021-10-27"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_x86_64_gnu]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-10-28"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_x86_64_gnu]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-10-28"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_x86_64_gnu]]
criteria = "safe-to-run"
user-id = 64539
start = "2021-10-28"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_x86_64_gnullvm]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2022-09-01"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_x86_64_gnullvm]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2022-09-01"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_x86_64_gnullvm]]
criteria = "safe-to-run"
user-id = 64539
start = "2022-09-01"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_x86_64_msvc]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-10-27"
end = "2026-03-24"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_x86_64_msvc]]
criteria = "safe-to-deploy"
user-id = 64539
start = "2021-10-27"
end = "2026-09-03"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[trusted.windows_x86_64_msvc]]
criteria = "safe-to-run"
user-id = 64539
start = "2021-10-27"
end = "2027-05-16"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tmp108/refs/heads/main/supply-chain/audits.toml"

[[trusted.winnow]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2023-02-22"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.winnow]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2023-02-22"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.winnow]]
criteria = "safe-to-deploy"
user-id = 6743
start = "2023-02-22"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.zerocopy]]
criteria = "safe-to-deploy"
user-id = 7178
start = "2019-02-28"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.zerocopy]]
criteria = "safe-to-deploy"
user-id = 7178
start = "2019-02-28"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.zerocopy]]
criteria = "safe-to-deploy"
user-id = 7178
start = "2019-02-28"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.zerocopy-derive]]
criteria = "safe-to-deploy"
user-id = 7178
start = "2019-02-28"
end = "2026-10-06"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/patina/refs/heads/main/supply-chain/audits.toml"

[[trusted.zerocopy-derive]]
criteria = "safe-to-deploy"
user-id = 7178
start = "2019-02-28"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.zerocopy-derive]]
criteria = "safe-to-deploy"
user-id = 7178
start = "2019-02-28"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[trusted.zmij]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2025-12-18"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/INA4230/refs/heads/main/supply-chain/audits.toml"

[[trusted.zmij]]
criteria = "safe-to-deploy"
user-id = 3618
start = "2025-12-18"
end = "2027-03-13"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"