- fuzz/ workspace (nightly-pinned subtree, own [workspace]), copied
from the alkhttp/alkcall pattern: thin fuzz_target wrappers,
stable-toolchain shared crate holding the invariant logic, detached
runner, seed generator, json.dict, README
- bast_compile: AlkTypeEngine::compile both modes over attacker BAST
JSON; meta-schema gate ordering, always-Result, fixed-size leaf
metadata partition, json_schema lane
- data_access: the hand-rolled decode core over raw bytes at
attacker-chosen offsets; bool strictness, UTF-8 discipline, bounds
partitions, indirect {offset,length} pair contract, write-side
no-touch-on-failure + write/read round trips
- 136 committed seeds (38 + 98) via fuzz/gen_fuzz_seeds.py
- root Cargo.toml: explicit [workspace] exclude=[fuzz]; publish
exclude gains fuzz/
- AGENTS.md verification checklist gains the corpus-replay gate
- .gitignore: fuzz artifacts + grown-corpus pattern
Verification: cargo test 569 pass; clippy -D warnings clean; corpus
replay 4/4 green (136 seeds); cargo fuzz build clean (nightly
confined to fuzz/)
12 lines
324 B
Plaintext
12 lines
324 B
Plaintext
target/
|
|
node_modules/
|
|
.worktrees/
|
|
|
|
fuzz/target/
|
|
fuzz/artifacts/
|
|
fuzz/coverage/
|
|
# Grown corpora: the hash-named files the campaigns drop into
|
|
# fuzz/corpus/<target>/ are gitignored (the quinn/h2 policy); the
|
|
# committed seeds are the seed-* files, kept via the per-dir
|
|
# .gitignore un-ignores.
|
|
fuzz/corpus/*/[0-9a-f][0-9a-f]* |