Block a user
Bug: Non-darwin KeychainUnlocker stub panics instead of returning errors
Bug: Init command writes longterm.age twice, second write overwrites correct encryption
Security: DecryptWithIdentity leaks plaintext in unprotected memory
Bug: NumSecrets() always returns 0 due to incorrect directory traversal
Bug: getLongTermPrivateKey hardcodes derivation index 0 for mnemonic path
Bug: FindExtraFiles reports manifest file and dotfiles as extra
Bug: newTimestampFromTime panics on dates outside ~1678-2262 due to UnixNano overflow
Bug: IsHiddenPath(".") returns true, incorrectly treating current directory as hidden
Bug: errors.Is with errors.New() never matches in checker file-not-found detection
Bug: fetch command does not URL-encode file paths, breaking files with special characters
Unbounded blob cache during restore can exhaust memory
SQL injection risk in getTableCount via fmt.Sprintf table name interpolation
CompressStream double-closes the blobgen.Writer causing potential errors