{
  "id": "workflow:systems-memory-safety-audit",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-systems-programming.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "Systems Memory Safety Audit",
    "workflowKind": "governance",
    "triggerType": "scheduled",
    "typicalCadence": "quarterly",
    "complexity": "cross-team",
    "description": "Audits systems-level codebases for memory safety vulnerabilities — running\nAddressSanitizer and MemorySanitizer builds across the full test suite,\nexecuting coverage-guided fuzzing campaigns targeting parser and protocol\nhandling code paths, analyzing unsafe block density and justification quality\nin Rust codebases, reviewing C/C++ code for buffer overflows, double-frees,\nand integer overflow patterns using Coverity and CodeQL, triaging findings by\nexploitability and blast radius, and tracking remediation progress against\nseverity-based SLA deadlines. Produces vulnerability findings with CVSS\nscoring, sanitizer run summaries, and remediation burndown charts. Excludes\napplication-layer security scanning.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:systems-memory-safety-audit",
      "to": "role:security-reviewer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:systems-memory-safety-audit",
      "to": "role:refactor-bot",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:systems-memory-safety-audit",
      "to": "role:principal-engineer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:systems-memory-safety-audit",
      "to": "skill-area:profiling-memory",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:systems-memory-safety-audit",
      "to": "skill-area:sast",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:systems-memory-safety-audit",
      "to": "domain:systems-programming",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:systems-memory-safety-audit",
      "to": "domain:cybersecurity",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:systems-memory-safety-audit",
      "to": "responsibility:security-review",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:systems-memory-safety-audit",
      "to": "responsibility:run-security-scans",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:systems-memory-safety-audit",
      "to": "org-unit:application-security-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:systems-memory-safety-audit",
      "to": "org-unit:engineering",
      "kind": "performed_by_org_unit",
      "attributes": {}
    }
  ],
  "incomingEdges": []
}