Summary

• harden cross-platform shared-memory lifecycle, locking, ownership, cleanup, and wait behavior
• make key-index compaction and segmented publishing resilient to crashes, corruption, and malformed sequences
• tighten layout validation, reservation handling, Windows mapping synchronization, and Linux filesystem security
• add Windows/Linux CI, warnings-as-errors, NuGet auditing, expanded regression coverage, and release/documentation alignment
• bump the package version to 1.0.1 because 1.0.0 is already published

Root causes addressed

The review found several production risks around bounded waits, arithmetic overflow, non-atomic metadata updates, PID reuse, symlink handling, mapping lifetime leaks, unsafe publication ordering, and recovery from interrupted writes. These changes resolve those failure modes and add regression tests around the affected contracts.

Validation

• Windows: 153 tests passed (43 contract, 62 unit, 48 integration)
• Linux (.NET 10 container): 152 tests passed (43 contract, 62 unit, 47 integration)
• full Docker validation passed, including abrupt recovery, contention, disposal races, isolated profiles, and clean packed-package consumption
• cross-platform validation, samples, documentation checks, package packing, and clean consumer validation passed
• Release build completed with zero warnings
• dotnet format verification passed
• NuGet vulnerability scan reported no vulnerable dependencies

Release follow-up

GitHub private vulnerability reporting is currently disabled for this repository. The package code and validation gates are green, but that repository security setting should be enabled before publication; the release documentation records this requirement.