Security

• Conformance — exactly which schemes are proven against published vectors, and which are not.
• Threat model — what is defended, what is out of scope, and what remains your job.

Read the conformance page before deploying a scheme that is not on the verified list. The distinction is deliberate and it is not a formality.