How Oxide’s Rust collections library defends against adversarial trait implementations.