Native Ruby binding and Rack middleware for libinjection. Report-only by default: detects SQLi/XSS-like payloads, emits structured attack signals, and can be combined with Rack::Attack. Ships with a pinned vendoring workflow for libinjection v4.0.0.