From db860b02aa05551d8d70cce512f39bb24b935fbc Mon Sep 17 00:00:00 2001
From: Runxi Yu
Date: Tue, 31 Mar 2026 11:39:35 +0000
Subject: object/id: Mut-Never RawBytes

---
 furgit.go                  | 4 ++++
 object/id/objectid_byte.go | 5 ++---
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/furgit.go b/furgit.go
index 75a79390..60966584 100644
--- a/furgit.go
+++ b/furgit.go
@@ -60,6 +60,10 @@
 //   - Close-No: the caller must not close the returned value directly.
 //   - Close-Idem: repeated Close calls are safe.
 //
+// Mutation labels:
+//
+//   - Mut-Never: returned values must not be mutated.
+//
 // Unless Close-Idem is specified, repeated Close calls are undefined behavior.
 //
 // Unless a doc comment explicitly states otherwise, these labels describe the
diff --git a/object/id/objectid_byte.go b/object/id/objectid_byte.go
index 8384ff45..8bd8ab82 100644
--- a/object/id/objectid_byte.go
+++ b/object/id/objectid_byte.go
@@ -9,10 +9,9 @@ func (id ObjectID) Bytes() []byte {
 
 // RawBytes returns a direct byte slice view of the object ID bytes.
 //
-// The returned slice aliases the object ID's internal storage. Callers MUST
-// treat it as read-only and MUST NOT modify its contents.
-//
 // Use Bytes when an independent copy is required.
+//
+// Labels: Mut-Never.
 func (id *ObjectID) RawBytes() []byte {
 	size := id.Algorithm().Size()
 
-- 
cgit v1.3.1-10-gc9f91