Initial project state: .NET reference, design, Rust port (M0+M1), evidence

Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

rust/Cargo.toml

@@ -0,0 +1,52 @@
+[workspace]
+resolver = "3"
+members = [
+    "crates/mxaccess-codec",
+    "crates/mxaccess-galaxy",
+    "crates/mxaccess-rpc",
+    "crates/mxaccess-callback",
+    "crates/mxaccess-nmx",
+    "crates/mxaccess-asb-nettcp",
+    "crates/mxaccess-asb",
+    "crates/mxaccess",
+    "crates/mxaccess-compat",
+]
+
+[workspace.package]
+version = "0.0.0"
+edition = "2024"
+license = "MIT"
+repository = "https://github.com/<org>/mxaccess"
+rust-version = "1.85"
+authors = ["Joseph Doherty <dohejw01@gmail.com>"]
+
+# Workspace-level dependency pins. Crates opt in via `dep = { workspace = true }`.
+# M0 stubs use minimal deps; the full pinned set per design/30-crate-topology.md
+# will be uncommented as M1+ implementation lands.
+[workspace.dependencies]
+thiserror    = "2"
+tracing      = "0.1"
+async-trait  = "0.1"
+futures-util = "0.3"
+bytes        = "1"
+byteorder    = "1"
+tokio        = { version = "1", features = ["net", "io-util", "rt-multi-thread", "sync", "time", "macros"] }
+
+[workspace.lints.rust]
+unsafe_op_in_unsafe_fn = "warn"
+
+[workspace.lints.clippy]
+unwrap_used    = "deny"
+expect_used    = "deny"
+panic          = "deny"
+todo           = "warn"      # warn during M0 stubs; will tighten to deny post-M1
+unreachable    = "deny"
+indexing_slicing = "deny"
+
+[profile.release]
+opt-level = 3
+lto = "thin"
+codegen-units = 1
+
+[profile.dev]
+opt-level = 0