Add an opt-in paranoid preset for authenticated input, bounded decompression and container sizes, UTF-8 validation, restricted object blessing and THAW, and a recursion limit of 2048. Explicit constructor options can override each default.
Add allow_classes for ordinary and frozen objects and track_classes for per-class object counts. Permit genuine Regexp objects through refuse_objects unless an allowlist excludes them.
Add allow_unsigned as an explicit checksum-policy opt-out. Lower the normal recursion limit from 10000 to 8192. Clarify the trust assumptions and limits of paranoid mode in the documentation.
Changes for version 7.001_003
Balance custom-op argument and result references on Perl builds with PERL_RC_STACK.
Recognize native binary64 in declaration tests on older Perls without pack D or longdblkind, including macOS Perl 5.20.3.
Changes for version 7.001_002
Dump hobodecoder packet bytes in Perl without od.
Make child-process regression tests portable on Windows.
Changes for version 7.001_001
Identify native long-double layouts correctly in tests on older FreeBSD Perls whose pack D size differs from C long double.
Bound the randomized Decoder stress test and reduce its TAP memory use while covering both v1 and v2 packets.