fix: replace redundant detect() call with meaningful invariant assertion

Replace the double sanitize()+detect() call with an assertion that critical severity warnings always trigger content modification. Co-Authored-By: Claude Opus 4.6 <[email protected]>
2026-08-26 23:50:17 +00:00 · 2026-03-09 23:14:10 -07:00
parent 3c6f4a97dc
commit 4bd19a7ece
1 changed files with 7 additions and 4 deletions
@@ -12,9 +12,12 @@ fuzz_target!(|data: &[u8]| {
        for w in &result.warnings {
            assert!(w.location.end <= s.len());
        }
-
-        // Exercise detection-only path
-        let warnings = sanitizer.detect(s);
-        assert_eq!(warnings.len(), result.warnings.len());
+        // Verify invariant: critical severity triggers modification
+        let has_critical = result.warnings.iter().any(|w| {
+            w.severity == ironclaw::safety::Severity::Critical
+        });
+        if has_critical {
+            assert!(result.was_modified);
+        }
    }
 });