jedarden c621947686 feat(bf-1g1fd): implement CI memory-ceiling gate with cgroup MemoryMax enforcement ... Implements Tier-1 memory ceiling gate that enforces RSS budgets for PDF extraction, analogous to cargo-bloat for binary size. Changes: - CI: Add memory-ceiling template with cgroup MemoryMax (1.5 GB) - CI: Add cgroup MemoryMax enforcement to test-glibc (6 GB) and test-musl (4 GB) - CI: Add cgroup MemoryMax + libfuzzer rss/malloc limits to fuzz workflow - xtask: Implement memory-ceiling command with peak RSS sampling - Add perf fixtures (100-page, 10k-page) for memory testing - Add run-fuzz-with-limits.sh for local fuzz testing with memory caps - Register perf fixtures in PROVENANCE.md Memory budgets enforced: - Buffered 100-page PDF: < 512 MB - Streaming mode: < 256 MB (constant in page count) - Adversarial fixtures: < 1 GB hard ceiling Closes bf-1g1fd Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>		2026-05-23 13:22:55 -04:00
..
ci	docs(pdftract-5l9m): add CI validation script and verification note	2026-05-18 01:05:33 -04:00
check-provenance.sh	fix(pdftract-5z5d8): fix provenance validation script	2026-05-17 23:43:37 -04:00
check-secrets.sh	feat(pdftract-59zz): implement MCP bearer token ingress channels and TH-03 enforcement	2026-05-18 02:47:54 -04:00
generate-minimal-pdf.sh	feat(bf-1g1fd): implement CI memory-ceiling gate with cgroup MemoryMax enforcement	2026-05-23 13:22:55 -04:00
generate_test_corpus.py	test(classifier): add 200-document labeled corpus for Phase 5.6	2026-05-17 07:16:02 -04:00
run-fuzz-with-limits.sh	feat(bf-1g1fd): implement CI memory-ceiling gate with cgroup MemoryMax enforcement	2026-05-23 13:22:55 -04:00