Compression and merge reject files with a detected signature ByteRange rather than claiming a cryptographic signature will survive a rewrite.
Password-protected inputs are rejected. Unlocking must happen through an authorized workflow elsewhere.
BytesPDF does not certify PDF/A conformance. Keep the archival master and use an appropriate external validator.
BytesPDF does not create OCR. Existing OCR text may remain, but scan-image changes can affect visual alignment and later recognition.
Compression clears common descriptive and XMP fields. It is not a forensic sanitizer for every attachment, annotation, image value, or application-specific object.
The published cap is an input rule, not a promise that every file below it will fit a particular device's available memory.