## Summary

<!-- 1-3 sentences: what changes and why -->

## Type of change

- [ ] Bug fix
- [ ] New feature
- [ ] Documentation
- [ ] Build / CI / tooling
- [ ] Security fix
- [ ] Breaking change

## Checklist

- [ ] I have read [CONTRIBUTING.md](../CONTRIBUTING.md)
- [ ] I have signed (or will sign) the [CLA](../CLA.md) — required for all contributions
- [ ] CI passes locally (`make lint`, `cargo test`, shell checks)
- [ ] If user-facing: docs / README / CHANGELOG updated
- [ ] If security-sensitive: notes in PR body explaining threat model impact

## Related issues / PRs

<!-- Closes #N, related to #M -->