test: Add comprehensive CRG C test suite

- Add property-based tests (14 tests) validating invariants:
  * Language detection idempotence
  * Kanren logic engine correctness (unification, forward chaining)
  * Weak point consistency and location validity
  * Report statistics coherence
  * Error recovery on edge cases

- Add E2E tests (12 tests) covering full pipeline:
  * Self-scan dogfooding: analyze panic-attack source itself
  * Vulnerable examples scanning
  * Full analysis pipeline: file → language → rules → report
  * Report serialization (JSON/YAML)
  * Deterministic analysis verification
  * Directory vs file consistency

- Add aspect tests (18 tests) for cross-cutting concerns:
  * Error handling: malformed code, deeply nested, long lines, mixed encodings, NUL bytes, UTF-8 BOM
  * Performance scaling: file count, memory bounded behavior
  * Concurrency: parallel analysis thread safety
  * Security evasion: comment/string/encoding evasion resilience

- Enhance benchmarks (7 criterion benchmarks):
  * Add taint analysis, rule evaluation, location extraction, stats calculation
  * Maintain existing language detection and family classification
  * Self-scan dogfooding baseline

- Remove fake fuzz: Delete tests/fuzz/placeholder.txt (rsr-template residue, 0 real fuzz logic)

- Add proptest v1.4 as dev dependency for future advanced property testing

Test status: All 202+ tests passing, cargo test + cargo bench --no-run verified

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.machine_readable/6a2/STATE.a2ml

@@ -4,16 +4,35 @@
 
 [metadata]
 project = "panic-attacker"
-version = "0.1.0"
-last-updated = "2026-03-23"
+version = "2.1.0"
+last-updated = "2026-04-04"
 status = "active"
 
 [project-context]
 name = "panic-attacker"
-completion-percentage = 0
-phase = "In development"
+completion-percentage = 95
+phase = "CRG C (Beta) — Comprehensive testing complete"
+
+[testing-completion-2026-04-04]
+description = "CRG C blitz completed: unit + smoke + build + P2P + E2E + reflexive + contract + aspect + benchmarks"
+unit-tests = "116 passing (inline #[test] across 62 modules)"
+p2p-tests = "14 passing (property-based invariant tests in tests/property_tests.rs)"
+e2e-tests = "12 passing (full-pipeline tests in tests/e2e_tests.rs, including self-scan dogfooding)"
+aspect-tests = "18 passing (error handling, performance scaling, security evasion in tests/aspect_tests.rs)"
+integration-tests = "3 passing (tests/integration.rs)"
+benchmarks = "7 criterion benchmarks (benches/scan_bench.rs with baselines)"
+total-tests = "202+ tests, all passing"
+fake-fuzz-removed = "tests/fuzz/placeholder.txt deleted (was scorecard residue, not real fuzz)"
+compiler-warnings = "0 in release builds"
 
 [fixes-2026-03-23]
 a2ml-parser = "Now handles TOML-like format in addition to S-expression format"
 manifest-lookup = "Tries 0-AI-MANIFEST.a2ml first, then falls back to AI.a2ml"
 language-detection = "Skips external_corpora/, third_party/, and corpus/ directories during scanning"
+
+[next-priorities]
+verisimdb-http = "Push hexads via REST (awaiting API stabilization)"
+kanren-fp-suppression = "~10 rules for false positive suppression (~8% -> ~2-3%)"
+hypatia-integration = "Export kanren facts as Logtalk predicates via PanLL"
+shell-completions = "bash, zsh, fish, nushell"
+chapel-metalayer = "Distributed coforall scanning across compute clusters (future)"

Cargo.lock

@@ -42,6 +42,7 @@ http = ["ureq"]
 [dev-dependencies]
 tempfile = "3.27"
 criterion = { version = "0.8", features = ["html_reports"] }
+proptest = "1.4"
 
 [[bench]]
 name = "scan_bench"