decrypt in place

overlay/batch/batch.go

@@ -3,13 +3,11 @@ package batch
 import "net/netip"
 
 type RxBatcher interface {
-	// Reserve creates a pkt to borrow
-	Reserve(sz int) []byte
-	// Commit borrows pkt. The caller must keep pkt valid until the next Flush
+	// Commit commits pkt to be flushed by the batch. The caller must keep pkt valid until the next Flush, and not re-use it.
 	Commit(pkt []byte) error
 	// Flush emits every queued packet in arrival order.
 	// Returns the first error observed; keeps draining so one bad packet doesn't hold up the rest.
-	// After Flush returns, borrowed payload slices may be recycled.
+	// After Flush returns, committed payload slices may be recycled.
 	Flush() error
 }