Self-describing header
Magic, transferId, k, block size, length, a payload CRC-32 and a header CRC-16 — lock on mid-stream.
Strict validation
A frame is bytes from a camera. A corrupt or crafted header is dropped, not trusted.
Rateless collector
Any order, duplicates tolerated, restarts on a new transfer id, checksum verified on assemble.
Byte utilities
CRC-16/CCITT, CRC-32, a seeded PRNG, XOR/concat and size formatting.
Sits above the codec: optical-kit carries the fountain code; frame-kit wraps it.