Harden LSB extraction against untrusted lengths, insufficient carrier capacity, truncated payloads, and unbounded stream consumption. Validate JPEG/EXIF covert framing, configured slot capacity, duplicate slots, Pack7 lengths, payload completeness, and the one MiB payload limit. Add focused boundary and malformed-input tests and document the incubating JPEG parser trust boundary and accepted residual risk.