Shah-Aayush

Verify that data crossing trust boundaries is validated for type, range, format, and length. Activate on any diff that touches code receiving external input (HTTP, IPC, file, queue, env, CLI args).