feat(materials): add RADAMSA_REPORT and RADAMSA_CRASHES material types

Merged
JA
4mo ago
+757-22

Adds two material types for ingesting radamsa fuzzing evidence into Chainloop attestations:

  • RADAMSA_REPORT — radamsa's -M metadata log (one record per generated iteration), projected to input.elements so policies can assert a minimum iteration count.
  • RADAMSA_CRASHES — crashing inputs, either a single file or a crashes/ archive (tar.gz or zip). Metadata-only: annotated with a crash count and excluded from policy content evaluation (both filesystem-read and inline content paths).

Includes a shared -M log parser subpackage, both crafters wired into the crafting switch, and the policy-engine content handling. The new types are intentionally not added to the material auto-detection list, since RADAMSA_CRASHES single-file mode would eagerly shadow other types; they are used via an explicit kind in workflow contracts.

AI assistance

This contribution was produced with the assistance of Claude Code. Affected commits carry an Assisted-by: Claude Code trailer.