The one-value check runs before decodeMarked, so a tail or deep payload is refused before any slot is marked.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
decodeDocumentPayload refuses bytes after the first value by count, from the
checkPayloadDepth walk's end, with the shared clause; readWire's own trailing
check is deleted. Walks bytes-after-outcomes.msgpack on the plain, codec, store
and putEnvelope paths.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>