ea5f6fb914
Model files come from untrusted mirrors. One choke point in load_cfg bounds every dimension (hostile config.json now dies with a clear message instead of reaching allocation sites); falloc guards the n*sizeof(float) wrap. No hot-path calloc churn — the report's patch was declined in review, the valid kernel of the idea is taken here. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>