feat(assurance)!: require applicable fuzzing and badge participation #19

Merged
KofTwentyTwo merged 1 commits from feat/security-assurance into main 2026-10-10 17:38:21 +00:00
1 Commits
Author SHA1 Message Date
james.maesandOpenAI GPT-6 Codex aa40477a11 feat(assurance)!: require applicable fuzzing and badge participation
Add native parser fuzzing to required CI, adoption records and evidence templates,
K22-TEST-25 and K22-REPO-12. Prepare the passing-criteria assessment and a scoped,
dated enrollment deferral while the provider prevents maintainer login.
Retain generated parser regressions and enforce exact exception scope and expiry.

BREAKING CHANGE: Public Product repositories must enroll and maintain their Best
Practices assessment; complex untrusted-input parsers must have merge-gating fuzz
campaigns and reviewed scope records. Publication requires a MAJOR release.

Refs: #18
Co-Authored-By: OpenAI GPT-6 Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
2026-10-10 12:22:36 -05:00