How it works

Native engine

The scanning engine is written in Rust and compiled as a staticlib. A thin C bridge exposes deterministic, limited APIs to higher-level languages.

Packaging

Build scripts create platform-appropriate libraries and package them as XCFrameworks for iOS. CI includes diagnostic steps to locate hashed Cargo artifacts.

Key management

Key derivation uses Argon2id. The `encrypt` crate provides a zeroizing key wrapper. Integrate where you need a local protection key.