b6fa51d9fd
- pack(): generate decoy padding (64-4096 random bytes per file) - pack(): encrypt serialized TOC with AES-256-CBC using random toc_iv - pack(): XOR header buffer before writing (8-byte cyclic key) - pack(): set flags bits 1-3 (0x0E) for all obfuscation features - unpack(): XOR bootstrapping via read_header_auto() - unpack(): decrypt TOC when flags bit 1 is set - inspect(): full de-obfuscation via shared read_archive_metadata() - Factor out read_archive_metadata() helper for unpack/inspect reuse - All existing tests pass (unit, golden, round-trip integration) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>