430 Task Dd739ef5

Task: Run zeroize-audit.

Inputs:

• path: {{path}}
• compile_db: {{compile_db}}
• cargo_manifest: {{cargo_manifest}}
• config: {{config}}
• opt_levels: {{opt_levels}}
• languages: {{languages}}
• max_tus: {{max_tus}}
• mcp_mode: {{mcp_mode}}
• mcp_required_for_advanced: {{mcp_required_for_advanced}}
• mcp_timeout_ms: {{mcp_timeout_ms}}
• enable_semantic_ir: {{enable_semantic_ir}}
• enable_cfg: {{enable_cfg}}
• enable_runtime_tests: {{enable_runtime_tests}}
• enable_asm: {{enable_asm}}
• poc_categories: {{poc_categories}}
• poc_output_dir: {{poc_output_dir}}

Execution Protocol

Recovery

If a workdir is known from prior context, read {workdir}/orchestrator-state.json to recover state after context compression:

• current_phase: resume from this phase
• workdir, run_id: working directory and run identifier
• inputs: original input values
• routing: key booleans (mcp_available, tu_count, finding_count)
• phases: completion status and output file paths for each phase
• key_file_paths: paths to all inter-phase artifacts

If no state exists, start at Phase 0.

Phase Loop

Execute phases sequentially. Before each phase, read its workflow file from {baseDir}/workflows/phase-{N}-{name}.md. Follow the workflow's Preconditions, Instructions, State Update, and Error Handling sections.

Early Termination

Skip directly to Phase 6 (produce empty/partial report) when:

• Phase 1 source analyzer finds zero sensitive objects
• Phase 3 interim report contains zero findings

Phase 8 — Return Results (inline)

Read {workdir}/report/final-report.md and return its contents as the skill output.

The markdown report is the primary human-readable output. It contains:

• Executive summary with finding counts by severity, confidence, and category
• PoC validation summary with exploitable/not-exploitable counts
• Sensitive objects inventory
• Detailed findings grouped by severity and confidence, each with evidence, PoC validation result, and recommended fix
• Superseded findings and confidence gate summary
• Analysis coverage and evidence file appendix

The structured {workdir}/report/findings.json (matching {baseDir}/schemas/output.json) is also available for machine consumption.

Error Handling Summary