A practical field guide to the ten keyed MAC constructions covered by the HMAC + BLAKE3 + SHA-3 + Poly1305 + BLAKE2 linter: key length, tag truncation, one-time Poly1305 keys, KMAC domain separation, and self-test vectors.
Eight pre-flight questions catch silent loss before you commit. Five toggles decide whether your downstream code sees the document you have or a quietly wrong version of it.