O.5 Release Corpus and Parser-Backed Fuzz Gate

Fuzz run description	Iterations	Pass	Result
O.4 six-template parser oracle	6	6/6	PASS
Mode compatibility and 1.4.0 regression	6	6/6	PASS
Nested/conditional hostile boundary corpus	12	12/12	PASS
Pinned seven-root external corpus inventory	40	40/40	FAIL

Fuzz run description

Iterations

Pass

Result

O.4 six-template parser oracle

6/6

PASS

Mode compatibility and 1.4.0 regression

6/6

PASS

Nested/conditional hostile boundary corpus

12/12

PASS

Pinned seven-root external corpus inventory

40/40

FAIL

Fuzz run description	Iterations	Pass	Result
O.4 six-template hostile-value renders and complete JSON parser oracle	6	6/6	PASS

Fuzz run description

Iterations

Pass

Result

O.4 six-template hostile-value renders and complete JSON parser oracle

6/6

PASS

Case	Template / input	Outcome
o4-best-practices	`rust-best-practices assignment with scalar and array values`	PASS: parsed object; no injected key
o4-rust-qa	`rust-qa assignment with booleans and paths`	PASS: parsed object; types preserved
o4-service	`service-hardening assignment with topics`	PASS: parsed object; no injection
o4-arch	`arch-qa conditional null and references`	PASS: parsed object; null branch preserved
o4-flaky	`flaky-test-qa optional scope values`	PASS: parsed object; optional fields stable
o4-req	`req-qa document and branch arrays`	PASS: parsed object; array boundaries preserved

Case

Template / input

Outcome

o4-best-practices

rust-best-practices assignment with scalar and array values

PASS: parsed object; no injected key

o4-rust-qa

rust-qa assignment with booleans and paths

PASS: parsed object; types preserved

o4-service

service-hardening assignment with topics

PASS: parsed object; no injection

o4-arch

arch-qa conditional null and references

PASS: parsed object; null branch preserved

o4-flaky

flaky-test-qa optional scope values

PASS: parsed object; optional fields stable

o4-req

req-qa document and branch arrays

PASS: parsed object; array boundaries preserved

Fuzz run description	Iterations	Pass	Result
Auto/legacy mode contract, 1.4.0 regression, and fail-closed output probes	6	6/6	PASS

Fuzz run description

Iterations

Pass

Result

Auto/legacy mode contract, 1.4.0 regression, and fail-closed output probes

6/6

PASS

Case	Template / input	Outcome
regression-auto-quoted	`Original 1.4.0 shape {"value": "{{ value }}"}`	PASS: ERR_JSON_MODE_CONTRACT before stdout/body emission
compat-legacy-quoted	`Explicit legacy quoted scalar`	PASS: valid JSON string and one WARN_JSON_LEGACY_ESCAPE_MODE
auto-bare-string	`Bare string complete JSON slot`	PASS: serde_json parsed string
auto-array-object	`Bare array/object values`	PASS: serde_json preserved array/object
checked-render	`validate --check-render parser gate`	PASS: render_checked state and no emitted body
malformed-output	`Malformed rendered JSON`	PASS: ERR_RENDER_JSON_MALFORMED and no output file

Case

Template / input

Outcome

regression-auto-quoted

Original 1.4.0 shape {"value": "{{ value }}"}

PASS: ERR_JSON_MODE_CONTRACT before stdout/body emission

compat-legacy-quoted

Explicit legacy quoted scalar

PASS: valid JSON string and one WARN_JSON_LEGACY_ESCAPE_MODE

auto-bare-string

Bare string complete JSON slot

PASS: serde_json parsed string

auto-array-object

Bare array/object values

PASS: serde_json preserved array/object

checked-render

validate --check-render parser gate

PASS: render_checked state and no emitted body

malformed-output

Malformed rendered JSON

PASS: ERR_RENDER_JSON_MALFORMED and no output file

Fuzz run description	Iterations	Pass	Result
Nested/conditional templates, hostile strings, lint diagnostics, and parser boundaries	12	12/12	PASS

Fuzz run description

Iterations

Pass

Result

Nested/conditional templates, hostile strings, lint diagnostics, and parser boundaries

12/12

PASS

Case	Template / input	Outcome
nested-array	`Nested array/object context`	PASS: complete JSON parse
conditional-null	`Conditional optional field`	PASS: null values preserved
unicode	`Unicode and control-safe text`	PASS: parser and injection checks
lint-warning	`Legacy static lint warning`	PASS: stable warning code
lint-error	`Auto quoted contract violation`	PASS: stable error code
no-body	`Parser failure output confinement`	PASS: no stdout/file body

Case

Template / input

Outcome

nested-array

Nested array/object context

PASS: complete JSON parse

conditional-null

Conditional optional field

PASS: null values preserved

unicode

Unicode and control-safe text

PASS: parser and injection checks

lint-warning

Legacy static lint warning

PASS: stable warning code

lint-error

Auto quoted contract violation

PASS: stable error code

no-body

Parser failure output confinement

PASS: no stdout/file body

Fuzz run description	Iterations	Pass	Result
Pinned seven-root inventory and external legacy-template ownership scan	40	40/40	FAIL

Fuzz run description

Iterations

Pass

Result

Pinned seven-root inventory and external legacy-template ownership scan

40/40

FAIL

Case	Template / input	Outcome
root-sc-compose	`Pinned sc-compose O.4 root`	PASS: 11 paths counted; expected fixtures classified
root-atm-core	`Pinned atm-core root`	PASS: 7 paths counted; 6 owned findings
root-cpo	`Pinned cpo root`	PASS: 7 paths counted; 7 owned findings
root-raptor	`Pinned raptor root`	PASS: 3 paths counted; 3 owned findings
root-sc-lint	`Pinned sc-lint root`	PASS: 6 paths counted; 6 owned findings
root-synaptic	`Pinned synaptic-canvas root`	PASS: 3 paths counted; 3 owned findings
root-roslyn-lint	`Pinned roslyn-lint root`	PASS: 3 paths counted; 3 owned findings

Case

Template / input

Outcome

root-sc-compose

Pinned sc-compose O.4 root

PASS: 11 paths counted; expected fixtures classified

root-atm-core

Pinned atm-core root

PASS: 7 paths counted; 6 owned findings

root-cpo

Pinned cpo root

PASS: 7 paths counted; 7 owned findings

root-raptor

Pinned raptor root

PASS: 3 paths counted; 3 owned findings

root-sc-lint

Pinned sc-lint root

PASS: 6 paths counted; 6 owned findings

root-synaptic

Pinned synaptic-canvas root

PASS: 3 paths counted; 3 owned findings

root-roslyn-lint

Pinned roslyn-lint root

PASS: 3 paths counted; 3 owned findings

Findings

O5-ATM-001

Minimal template / frontmatter: atm-core: six .claude assignment JSON templates listed in docs/phase-O/evidence/o5-release-corpus.md
Input: hostile string value in a manually quoted placeholder
Expected: Migrate to explicit auto/bare values or explicitly pin legacy
Observed: No explicit mode; 1.4.1 auto contract will reject quoted placeholders or risk double quoting
Requirement / ADR: docs/requirements.md FR-1b-json; ADR-0019
Requirement / ADR follow-up: atm-core owner creates migration PR and reruns O5
Root cause: Consumer templates predate the 1.4.1 mode contract
Recommended fix: Migrate six paths in atm-core; add parser-backed tests

O5-CPO-001

Minimal template / frontmatter: cpo: seven JSON assignment paths listed in docs/phase-O/evidence/o5-release-corpus.md
Input: hostile string value in a manually quoted placeholder
Expected: Migrate to explicit auto/bare values or explicitly pin legacy
Observed: No explicit mode and quoted placeholders across all seven paths
Requirement / ADR: docs/requirements.md FR-1b-json; ADR-0019
Requirement / ADR follow-up: cpo owner creates migration PR and reruns O5
Root cause: Consumer templates predate the 1.4.1 mode contract
Recommended fix: Migrate seven paths and add parser-backed tests

O5-RAPTOR-001

Minimal template / frontmatter: raptor: three .claude/assets/sc-rust assignment paths listed in docs/phase-O/evidence/o5-release-corpus.md
Input: hostile string value in a manually quoted placeholder
Expected: Migrate to explicit auto/bare values or explicitly pin legacy
Observed: No explicit mode and quoted placeholders across all three paths
Requirement / ADR: docs/requirements.md FR-1b-json; ADR-0019
Requirement / ADR follow-up: raptor owner creates migration PR and reruns O5
Root cause: Consumer templates predate the 1.4.1 mode contract
Recommended fix: Migrate three paths and add parser-backed tests

O5-SCLINT-001

Minimal template / frontmatter: sc-lint: six assignment paths listed in docs/phase-O/evidence/o5-release-corpus.md
Input: hostile string value in a manually quoted placeholder
Expected: Migrate to explicit auto/bare values or explicitly pin legacy
Observed: No explicit mode and quoted placeholders across all six paths
Requirement / ADR: docs/requirements.md FR-1b-json; ADR-0019
Requirement / ADR follow-up: sc-lint owner creates migration PR or coordinates canonical package update
Root cause: Shared templates predate the 1.4.1 mode contract
Recommended fix: Migrate six paths and add parser-backed tests

O5-SYNAPTIC-001

Minimal template / frontmatter: synaptic-canvas: three packages/sc-rust assignment paths listed in docs/phase-O/evidence/o5-release-corpus.md
Input: hostile string value in a manually quoted placeholder
Expected: Migrate to explicit auto/bare values or explicitly pin legacy
Observed: No explicit mode and quoted placeholders across all three paths
Requirement / ADR: docs/requirements.md FR-1b-json; ADR-0019
Requirement / ADR follow-up: synaptic-canvas owner creates migration PR or consumes canonical package
Root cause: Consumer templates predate the 1.4.1 mode contract
Recommended fix: Migrate three paths and add parser-backed tests

O5-ROSLYN-001

Minimal template / frontmatter: roslyn-lint: three .claude/skills/codex-orchestration assignment paths listed in docs/phase-O/evidence/o5-release-corpus.md
Input: hostile string value in a manually quoted placeholder
Expected: Migrate to explicit auto/bare values or explicitly pin legacy
Observed: No explicit mode and quoted placeholders across all three paths
Requirement / ADR: docs/requirements.md FR-1b-json; ADR-0019
Requirement / ADR follow-up: roslyn-lint owner creates migration PR and reruns O5
Root cause: Consumer templates predate the 1.4.1 mode contract
Recommended fix: Migrate three paths and add parser-backed tests

Recommendations

Team-lead owners must migrate the 28 external quoted templates to explicit auto/bare values or pin legacy, then rerun the corpus.

Resolve O5-SC-LINT-BOOTSTRAP-001 in a separate sc-lint fix worktree/PR; the full just lint gate must be rerun after merge. No suppression was added.

Keep legacy mode during the deprecation window only; remove it after all pinned roots are clean and a parser-backed release campaign is green.

Pinned roots

7 (sc-compose, atm-core, cpo, raptor, sc-lint, synaptic-canvas, roslyn-lint)

Templates scanned

40 total; 28 external owned findings

Workspace gates

just test/cargo/fmt/clippy/fast/direct boundary PASS; full just lint BLOCKED

Release recommendation

CONDITIONAL

O.5 Release Corpus and Parser-Backed Fuzz Gate

Summary

six-template-parser-oracle

Inputs exercised

mode-compatibility-regression

Inputs exercised

boundary-and-structure

Inputs exercised

cross-repository-inventory

Inputs exercised

Findings

O5-ATM-001

O5-CPO-001

O5-RAPTOR-001

O5-SCLINT-001

O5-SYNAPTIC-001

O5-ROSLYN-001

Recommendations

Metadata