3 Commits

Include renames

Author	SHA1	Message	Date
[email protected]andClaude Opus 4.6	4bd19a7ece	fix: replace redundant detect() call with meaningful invariant assertion ... Replace the double sanitize()+detect() call with an assertion that critical severity warnings always trigger content modification. Co-Authored-By: Claude Opus 4.6 <[email protected]>	2026-03-09 23:14:10 -07:00
[email protected]andClaude Opus 4.6	3c6f4a97dc	fix: improve fuzz targets to exercise real IronClaw code paths ... - fuzz_config_env: exercise SafetyLayer end-to-end (sanitize, validate, policy check) instead of generic TOML/JSON parsing - fuzz_tool_params: add validate_tool_schema coverage alongside validate_tool_params - Add "fuzz" to workspace exclude in root Cargo.toml - Update README descriptions to match actual target behavior [skip-regression-check] Co-Authored-By: Claude Opus 4.6 <[email protected]>	2026-03-09 23:09:25 -07:00
[email protected]andClaude Opus 4.6	e41eb8ae33	feat: add fuzzing targets for untrusted input parsers ... Add cargo-fuzz infrastructure with 5 fuzz targets exercising security-critical code paths: - fuzz_safety_sanitizer: Aho-Corasick + regex injection detection - fuzz_safety_validator: Input validation (length, encoding, patterns) - fuzz_leak_detector: Secret leak scanning (API keys, tokens) - fuzz_tool_params: Tool parameter JSON validation - fuzz_config_env: TOML/JSON config parsing Each target exercises real IronClaw business logic with invariant assertions. Includes corpus directories and setup documentation. Co-Authored-By: Claude Opus 4.6 <[email protected]>	2026-03-09 23:05:58 -07:00