Fuzz testing targets for trust boundaries #4
Description
Pre-1.0 security item (ADR-0021)
Set up cargo-fuzz targets for trust boundary code.
Targets
- SDL parser (primary — all scenario input is untrusted)
- Schema deserializer (protobuf/JSON input)
When to action
When aces-sdl parser exists and has a parseable grammar.
What the spec needs to cover
- Fuzz target location (
fuzz/directory convention) - Corpus seeding strategy (from test fixtures)
- CI integration (scheduled runs, not per-PR)
- How to handle findings (security advisory vs bug fix)
References
- STANDARDS.md §10.6
- ADR-0021 Layer 2 (Code Safety)