v0.1.7 — audit hardening release

Memory-safety, thread-safety, security, and performance fixes from a full
appsec + codebase audit. See CHANGELOG.md for details.