Motivation

• Strengthen fuzz coverage for the core invariant that deterministic derivation is order-independent across different artifact domains (RSA, OpenPGP, X.509).
• Detect cross-domain perturbations where generating one kind of fixture might inadvertently change another due to shared state or derivation errors.

Description

• Add a new fuzz target fuzz/fuzz_targets/fuzz_order_independent_identity.rs that generates RSA, OpenPGP, and X.509 artifacts from the same Seed and asserts snapshots are identical when produced in forward vs reverse order.
• Introduce bounded input checks (label and CN length caps and non-empty subject_cn) to keep fuzz execution bounded and avoid pathological allocations.
• Register the new target in fuzz/Cargo.toml so it is discoverable by cargo fuzz.

Testing

• Ran cargo check --manifest-path fuzz/Cargo.toml which completed successfully and built the fuzz workspace in the dev profile.

Codex Task