From d0864a4e68e453d86943ff84a7eaec2b8996ca99 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Mon, 24 Aug 2026 10:44:31 +0100
Subject: [PATCH] chore(security): triage and resolve panic-attack findings
 (fixes #31)

---
 audits/assail-classifications.a2ml | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 audits/assail-classifications.a2ml

diff --git a/audits/assail-classifications.a2ml b/audits/assail-classifications.a2ml
new file mode 100644
index 0000000..f68d3c2
--- /dev/null
+++ b/audits/assail-classifications.a2ml
@@ -0,0 +1,25 @@
+%A2ML
+- suppression:
+    file: 'repl/shell.rkt'
+    rule: 'CommandInjection'
+    justification: 'Expected REPL functionality for language interaction.'
+- suppression:
+    file: 'repl/shell.rkt'
+    rule: 'DynamicCodeExecution'
+    justification: 'Expected REPL functionality for evaluating user-provided language code.'
+- suppression:
+    file: 'ui/public/app.js'
+    rule: 'DynamicCodeExecution'
+    justification: 'DOM updates are controlled by internal application state, no untrusted execution.'
+- suppression:
+    file: 'verification/benchmarks/bench_lexer.rs'
+    rule: 'UnboundedAllocation'
+    justification: 'Benchmark code reading fixed local corpus files.'
+- suppression:
+    file: 'bench/bench_lexer.rs'
+    rule: 'UnboundedAllocation'
+    justification: 'Benchmark code reading fixed local corpus files.'
+- suppression:
+    file: 'tools/bet-cli/src/main.rs'
+    rule: 'UnboundedAllocation'
+    justification: 'CLI tool reading bounded user input files into memory for processing.'