Trevor Gutierrez

Fixed-scope external audit of the cryptographic core by a specialist firm: construction and composition of the primitives, key management and lifecycle, and API misuse-resistance. The full report will be published. Amount is a market-sized estimate for a library of this size and scope.

Separable external review of the WebAssembly/JavaScript boundary: preservation of constant-time behaviour and memory hygiene across Rust to WASM to JS, and absence of boundary-level leaks or misuse hazards. Report published in full.

Triage and remediation of audit findings with auditor re-test, published test vectors, documentation and integration examples, and packaging for crates.io and npm, billed at a cost-recovery rate.

Any amount toward the audit and open-source engineering above.