docs: add security review status notice

[AztecBot]

Summary

• Add a top-level README notice using standard unaudited-code/security-review terminology.
• Add an npm-visible package description that points readers to the README security review status.
• Confirm the existing package build path copies the README and preserves the description for future npm releases and tag snapshots.

Verification

• git diff --check
• jq empty package.json
• jq 'del(.scripts, .jest, ."lint-staged", .packageManager, .devDependencies, .dependencies, .engines, .resolutions)' package.json | jq -r '.description'

---

Created by claudebox · group: slackbot · requested by Alejo Amiras · Slack thread

[github-actions]

Benchmark Comparison

CPU	Cores	RAM	Arch
AMD EPYC 9V74 80-Core Processor	4	16 GiB	x64

Contract: escrow

🚦	Function	Gates			DA Gas			L2 Gas			Proving Time (ms)
		Base	PR	Diff	Base	PR	Diff	Base	PR	Diff	Base	PR	Diff
⚪	(partial) withdraw	486,936	486,936		3,744	3,744		587,800	587,800		14,061	11,671	-2,390 (-17.0%)
⚪	withdraw	331,210	331,210		832	832		499,700	499,700		11,310	9,452	-1,858 (-16.4%)
⚪	withdraw_nft	378,517	378,517		1,440	1,440		527,400	527,400		12,466	10,386	-2,080 (-16.7%)

Contract: logic

🚦	Function	Gates			DA Gas			L2 Gas			Proving Time (ms)
		Base	PR	Diff	Base	PR	Diff	Base	PR	Diff	Base	PR	Diff
⚪	get_escrow	390,359	390,359		192	192		456,000	456,000		12,637	10,514	-2,123 (-16.8%)
⚪	secret_key_to_public_keys	387,718	387,718		192	192		456,000	456,000		12,614	10,488	-2,126 (-16.9%)
⚪	share_escrow	303,989	303,989		1,952	1,952		520,700	520,700		11,142	9,307	-1,835 (-16.5%)

Contract: multitoken

🚦	Function	Gates			DA Gas			L2 Gas			Proving Time (ms)
		Base	PR	Diff	Base	PR	Diff	Base	PR	Diff	Base	PR	Diff
⚪	burn_private	260,810	260,810		832	832		499,700	499,700		10,137	8,507	-1,630 (-16.1%)
⚪	burn_public	223,823	223,823		416	416		638,292	638,292		9,734	8,183	-1,551 (-15.9%)
⚪	initialize_transfer_commitment	225,077	225,077		768	768		474,500	474,500		9,645	8,142	-1,503 (-15.6%)
⚪	mint_to_private	297,577	297,577		1,408	1,408		511,400	511,400		10,984	9,181	-1,803 (-16.4%)
⚪	mint_to_public	223,823	223,823		416	416		637,800	637,800		9,933	8,161	-1,772 (-17.8%)
⚪	transfer_private_to_commitment	264,328	264,328		1,024	1,024		511,400	511,400		10,214	8,554	-1,660 (-16.3%)
⚪	transfer_private_to_private	337,261	337,261		2,048	2,048		555,100	555,100		11,390	9,597	-1,793 (-15.7%)
⚪	transfer_private_to_public	307,363	307,363		1,056	1,056		714,677	714,677		11,060	9,208	-1,852 (-16.7%)
⚪	transfer_public_to_commitment	223,823	223,823		640	640		663,516	663,516		9,829	8,194	-1,635 (-16.6%)
⚪	transfer_public_to_private	298,128	298,128		1,024	1,024		683,958	683,958		10,941	9,129	-1,812 (-16.6%)
⚪	transfer_public_to_public	223,823	223,823		480	480		673,505	673,505		9,778	8,303	-1,475 (-15.1%)

Contract: nft

🚦	Function	Gates			DA Gas			L2 Gas			Proving Time (ms)
		Base	PR	Diff	Base	PR	Diff	Base	PR	Diff	Base	PR	Diff
⚪	burn_private	275,257	275,257		416	416		661,052	661,052		10,527	8,857	-1,670 (-15.9%)
⚪	burn_public	223,823	223,823		448	448		670,034	670,034		9,811	8,168	-1,643 (-16.7%)
⚪	mint_to_private	341,050	341,050		1,600	1,600		735,342	735,342		11,663	9,701	-1,962 (-16.8%)
⚪	mint_to_public	223,823	223,823		448	448		670,718	670,718		9,762	8,167	-1,595 (-16.3%)
⚪	transfer_private_to_private	249,719	249,719		832	832		499,700	499,700		10,077	8,405	-1,672 (-16.6%)
⚪	transfer_private_to_public	275,286	275,286		416	416		659,258	659,258		10,835	8,873	-1,962 (-18.1%)
⚪	transfer_public_to_private	292,460	292,460		992	992		683,268	683,268		10,808	9,057	-1,751 (-16.2%)
⚪	transfer_public_to_public	223,823	223,823		384	384		633,285	633,285		9,803	8,246	-1,557 (-15.9%)

Contract: token

🚦	Function	Gates			DA Gas			L2 Gas			Proving Time (ms)
		Base	PR	Diff	Base	PR	Diff	Base	PR	Diff	Base	PR	Diff
⚪	burn_private	303,652	303,652		1,024	1,024		713,843	713,843		10,922	9,189	-1,733 (-15.9%)
⚪	burn_public	223,823	223,823		448	448		672,518	672,518		9,777	8,194	-1,583 (-16.2%)
⚪	initialize_transfer_commitment	225,077	225,077		768	768		474,500	474,500		9,744	8,260	-1,484 (-15.2%)
⚪	mint_to_private	355,289	355,289		2,144	2,144		737,956	737,956		11,896	9,861	-2,035 (-17.1%)
⚪	mint_to_public	223,823	223,823		448	448		672,113	672,113		9,857	8,285	-1,572 (-15.9%)
⚪	transfer_private_to_commitment	260,673	260,673		992	992		511,400	511,400		10,158	8,511	-1,647 (-16.2%)
⚪	transfer_private_to_private	344,855	344,855		2,592	2,592		557,600	557,600		11,572	9,799	-1,773 (-15.3%)
⚪	transfer_private_to_public	303,708	303,708		1,024	1,024		713,990	713,990		11,037	9,213	-1,824 (-16.5%)
⚪	transfer_private_to_public_with_commitment	308,509	308,509		1,600	1,600		747,290	747,290		11,062	9,235	-1,827 (-16.5%)
⚪	transfer_public_to_commitment	223,823	223,823		576	576		662,496	662,496		9,847	8,163	-1,684 (-17.1%)
⚪	transfer_public_to_private	296,092	296,092		992	992		683,271	683,271		10,906	9,180	-1,726 (-15.8%)
⚪	transfer_public_to_public	223,823	223,823		448	448		672,515	672,515		9,869	8,174	-1,695 (-17.2%)

Contract: vault

🚦	Function	Gates			DA Gas			L2 Gas			Proving Time (ms)
		Base	PR	Diff	Base	PR	Diff	Base	PR	Diff	Base	PR	Diff
⚪	deposit_private_to_private	508,340	508,340		1,312	1,312		878,035	878,035		14,444	11,908	-2,536 (-17.6%)
⚪	deposit_private_to_private_exact	612,065	612,065		1,888	1,888		915,103	915,103		16,290	13,507	-2,783 (-17.1%)
⚪	deposit_private_to_public	436,085	436,085		768	768		862,060	862,060		13,301	10,999	-2,302 (-17.3%)
⚪	deposit_public_to_private	424,713	424,713		1,984	1,984		964,832	964,832		13,296	10,924	-2,372 (-17.8%)
⚪	deposit_public_to_private_exact	424,724	424,724		1,952	1,952		949,256	949,256		13,243	10,916	-2,327 (-17.6%)
⚪	deposit_public_to_public	223,823	223,823		832	832		897,350	897,350		9,823	8,177	-1,646 (-16.8%)
⚪	issue_private_to_private_exact	612,065	612,065		1,888	1,888		915,763	915,763		16,297	13,571	-2,726 (-16.7%)
⚪	issue_private_to_public_exact	484,820	484,820		1,344	1,344		899,785	899,785		14,076	11,642	-2,434 (-17.3%)
⚪	issue_public_to_private	346,165	346,165		1,376	1,376		921,448	921,448		11,742	9,730	-2,012 (-17.1%)
⚪	issue_public_to_public	223,823	223,823		832	832		898,040	898,040		9,858	8,154	-1,704 (-17.3%)
⚪	redeem_private_to_private_exact	614,859	614,859		1,888	1,888		915,610	915,610		16,172	13,553	-2,619 (-16.2%)
⚪	redeem_private_to_public	436,028	436,028		768	768		862,504	862,504		13,088	11,010	-2,078 (-15.9%)
⚪	redeem_public_to_private_exact	427,575	427,575		1,952	1,952		949,577	949,577		12,969	10,951	-2,018 (-15.6%)
⚪	redeem_public_to_public	223,823	223,823		832	832		897,872	897,872		9,653	8,133	-1,520 (-15.7%)
⚪	withdraw_private_to_private	511,134	511,134		1,312	1,312		878,245	878,245		14,186	11,950	-2,236 (-15.8%)
⚪	withdraw_private_to_private_exact	614,859	614,859		1,888	1,888		915,556	915,556		16,155	13,549	-2,606 (-16.1%)
⚪	withdraw_private_to_public_exact	484,763	484,763		1,344	1,344		900,019	900,019		13,822	11,675	-2,147 (-15.5%)
⚪	withdraw_public_to_private	440,832	440,832		2,528	2,528		967,143	967,143		13,309	11,145	-2,164 (-16.3%)
⚪	withdraw_public_to_public	223,823	223,823		832	832		898,175	898,175		9,709	8,155	-1,554 (-16.0%)

[alejoamiras]

Let's go with #10