chore: add #![forbid(unsafe_code)] to safe Rust crates

Adds the forbid(unsafe_code) crate-level attribute to all Rust crates
that do not use unsafe code, hardening the safety guarantee at compile
time.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

lithoglyph/geo/src/lib.rs

@@ -4,6 +4,7 @@
 //! Geospatial extension for Lith providing spatial indexing
 //! and queries while preserving auditability guarantees.
 
+#![forbid(unsafe_code)]
 pub mod api;
 pub mod config;
 pub mod lithoglyph;

lithoglyph/glyphbase/server/native_rust/src/lib.rs

@@ -4,6 +4,7 @@
 // This NIF connects BEAM (Erlang/Gleam/Elixir) to Lithoglyph via the Lithoglyph C ABI.
 // Uses CBOR-encoded binaries for efficient data transfer.
 
+#![forbid(unsafe_code)]
 use rustler::{Encoder, Env, Error, ResourceArc, Term};
 
 mod atoms {

lithoglyph/lith-http/native_rust/src/lib.rs

@@ -4,6 +4,7 @@
 // This NIF connects BEAM (Erlang/Gleam/Elixir) to Lithoglyph via the Lith C ABI.
 // Uses CBOR-encoded binaries for efficient data transfer.
 
+#![forbid(unsafe_code)]
 use rustler::{Encoder, Env, Error, ResourceArc, Term};
 
 mod atoms {

lithoglyph/studio/src-tauri/src/main.rs

@@ -5,6 +5,7 @@
 
 #![cfg_attr(not(debug_assertions), windows_subsystem = "windows")]
 
+#![forbid(unsafe_code)]
 use serde::{Deserialize, Serialize};
 
 // ============================================================================

verisimdb/connectors/clients/rust/src/lib.rs

@@ -34,6 +34,7 @@
 //! - [`federation`] — Peer registration and federated cross-instance queries.
 //! - [`error`] — Error types and the crate-level `Result` alias.
 
+#![forbid(unsafe_code)]
 pub mod client;
 pub mod types;
 pub mod octad;

verisimdb/debugger/src/main.rs

@@ -4,6 +4,7 @@
 //! Status: Alpha development (v0.1.0)
 //! Not yet functional - scaffolding only
 
+#![forbid(unsafe_code)]
 fn main() {
     eprintln!("verisimdb-debugger v0.1.0");
     eprintln!("Status: Alpha development - not yet functional");

verisimdb/rust-core/verisim-api/src/lib.rs

@@ -4,6 +4,7 @@
 //! HTTP API server for VeriSimDB.
 //! Exposes all database functionality via REST endpoints.
 
+#![forbid(unsafe_code)]
 pub mod auth;
 pub mod federation;
 pub mod graphql;

verisimdb/rust-core/verisim-document/src/lib.rs

@@ -4,6 +4,7 @@
 //! Full-text search via Tantivy.
 //! Implements Marr's Computational Level: "What text matches?"
 
+#![forbid(unsafe_code)]
 use async_trait::async_trait;
 use serde::{Deserialize, Serialize};
 use std::collections::HashMap;

verisimdb/rust-core/verisim-drift/src/lib.rs

@@ -4,6 +4,7 @@
 //! Monitors cross-modal consistency degradation and triggers normalization.
 //! This is the "early warning system" for data quality issues.
 
+#![forbid(unsafe_code)]
 use chrono::{DateTime, Utc};
 use prometheus::{Counter, Gauge, Registry};
 use serde::{Deserialize, Serialize};

verisimdb/rust-core/verisim-graph/src/lib.rs

@@ -11,6 +11,7 @@
 //!
 //! Implements Marr's Computational Level: "What relationships exist?"
 
+#![forbid(unsafe_code)]
 use async_trait::async_trait;
 use serde::{Deserialize, Serialize};
 use std::collections::{HashMap, HashSet};