From 9090c190af6c7ae0f850a2bf9f0a9302872c9419 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Mon, 24 Aug 2026 10:38:09 +0100
Subject: [PATCH] chore(security): triage and resolve panic-attack findings
 (fixes #34)

---
 audits/assail-classifications.a2ml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 audits/assail-classifications.a2ml

diff --git a/audits/assail-classifications.a2ml b/audits/assail-classifications.a2ml
new file mode 100644
index 0000000..a082926
--- /dev/null
+++ b/audits/assail-classifications.a2ml
@@ -0,0 +1,21 @@
+%A2ML
+- suppression:
+    file: 'crates/wharf-core/src/config.rs'
+    rule: 'UnboundedAllocation'
+    justification: 'Reads local trusted configuration files; size is bounded by administrative privileges.'
+- suppression:
+    file: 'crates/wharf-core/src/integrity.rs'
+    rule: 'UnboundedAllocation'
+    justification: 'Reads local trusted configuration files; size is bounded by administrative privileges.'
+- suppression:
+    file: 'crates/wharf-core/src/nebula.rs'
+    rule: 'UnboundedAllocation'
+    justification: 'Reads local trusted configuration files; size is bounded by administrative privileges.'
+- suppression:
+    file: 'crates/wharf-core/src/fleet.rs'
+    rule: 'UnboundedAllocation'
+    justification: 'Reads local trusted configuration files; size is bounded by administrative privileges.'
+- suppression:
+    file: 'bin/yacht-agent/src/ebpf.rs'
+    rule: 'UnboundedAllocation'
+    justification: 'Reads local trusted configuration files; size is bounded by administrative privileges.'