audit: classify 10 FFI/systems unsafe findings as legitimate (PA001/PA007) (#62)

panic-attack assail flags 10 UnsafeCode/UnsafeFFI Critical/High findings
under container-stack/ — all at the C-ABI / syscall / kernel boundary.

Rationale: vordr is an eBPF + Zig + Rust container runtime; selur is a Zig sandbox; cerro-torre is an Ada post-quantum component binding liboqs via Ada's pragma Convention/Unchecked_Conversion. All 10 findings are at the Rust↔eBPF kernel boundary, Zig FFI to libc/libcontainer, or Ada↔C bindings to liboqs.

Adds:
- audits/assail-classifications.a2ml (entries=10, classification=legitimate-ffi)
- audits/audit-ffi-2026-05-26.md

Anti-gameability: registry is separate from source under scan; new unsafe
inside a classified root requires a companion classification entry.

Refs hyperpolymath/panic-attack#32 (estate sweep tracker).

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

audits/assail-classifications.a2ml

@@ -0,0 +1,75 @@
+;; SPDX-License-Identifier: MPL-2.0
+;; Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
+;;
+;; Assail Classifications — stapeln
+;; See panic-attack/.claude/CLAUDE.md § "User-Classification Registry".
+
+(assail-classifications
+  (metadata
+    (version "1.0.0")
+    (project "stapeln")
+    (last-updated "2026-05-26")
+    (entries 10)
+    (status "active"))
+
+  (classification
+    (file "container-stack/vordr/src/rust/engine/state.rs")
+    (category "UnsafeCode")
+    (classification "legitimate-ffi")
+    (audit "audits/audit-ffi-2026-05-26.md")
+    (rationale "vordr is an eBPF + Zig + Rust container runtime; selur is a Zig sandbox; cerro-torre is an Ada post-quantum component binding liboqs via Ada's pragma Convention/Unchecked_Conversion. All 10 findings are at the Rust↔eBPF kernel boundary, Zig FFI to libc/libcontainer, or Ada↔C bindings to liboqs."))
+  (classification
+    (file "container-stack/vordr/src/rust/engine/config.rs")
+    (category "UnsafeCode")
+    (classification "legitimate-ffi")
+    (audit "audits/audit-ffi-2026-05-26.md")
+    (rationale "vordr is an eBPF + Zig + Rust container runtime; selur is a Zig sandbox; cerro-torre is an Ada post-quantum component binding liboqs via Ada's pragma Convention/Unchecked_Conversion. All 10 findings are at the Rust↔eBPF kernel boundary, Zig FFI to libc/libcontainer, or Ada↔C bindings to liboqs."))
+  (classification
+    (file "container-stack/vordr/src/rust/engine/lifecycle.rs")
+    (category "UnsafeCode")
+    (classification "legitimate-ffi")
+    (audit "audits/audit-ffi-2026-05-26.md")
+    (rationale "vordr is an eBPF + Zig + Rust container runtime; selur is a Zig sandbox; cerro-torre is an Ada post-quantum component binding liboqs via Ada's pragma Convention/Unchecked_Conversion. All 10 findings are at the Rust↔eBPF kernel boundary, Zig FFI to libc/libcontainer, or Ada↔C bindings to liboqs."))
+  (classification
+    (file "container-stack/vordr/src/rust/ebpf/bpf/sched_exec.rs")
+    (category "UnsafeCode")
+    (classification "legitimate-ffi")
+    (audit "audits/audit-ffi-2026-05-26.md")
+    (rationale "vordr is an eBPF + Zig + Rust container runtime; selur is a Zig sandbox; cerro-torre is an Ada post-quantum component binding liboqs via Ada's pragma Convention/Unchecked_Conversion. All 10 findings are at the Rust↔eBPF kernel boundary, Zig FFI to libc/libcontainer, or Ada↔C bindings to liboqs."))
+  (classification
+    (file "container-stack/vordr/src/rust/ebpf/bpf/sched_exec.rs")
+    (category "UnsafeCode")
+    (classification "legitimate-ffi")
+    (audit "audits/audit-ffi-2026-05-26.md")
+    (rationale "vordr is an eBPF + Zig + Rust container runtime; selur is a Zig sandbox; cerro-torre is an Ada post-quantum component binding liboqs via Ada's pragma Convention/Unchecked_Conversion. All 10 findings are at the Rust↔eBPF kernel boundary, Zig FFI to libc/libcontainer, or Ada↔C bindings to liboqs."))
+  (classification
+    (file "container-stack/vordr/src/rust/ebpf/bpf/sys_enter.rs")
+    (category "UnsafeCode")
+    (classification "legitimate-ffi")
+    (audit "audits/audit-ffi-2026-05-26.md")
+    (rationale "vordr is an eBPF + Zig + Rust container runtime; selur is a Zig sandbox; cerro-torre is an Ada post-quantum component binding liboqs via Ada's pragma Convention/Unchecked_Conversion. All 10 findings are at the Rust↔eBPF kernel boundary, Zig FFI to libc/libcontainer, or Ada↔C bindings to liboqs."))
+  (classification
+    (file "container-stack/vordr/ffi/zig/src/main.zig")
+    (category "UnsafeCode")
+    (classification "legitimate-ffi")
+    (audit "audits/audit-ffi-2026-05-26.md")
+    (rationale "vordr is an eBPF + Zig + Rust container runtime; selur is a Zig sandbox; cerro-torre is an Ada post-quantum component binding liboqs via Ada's pragma Convention/Unchecked_Conversion. All 10 findings are at the Rust↔eBPF kernel boundary, Zig FFI to libc/libcontainer, or Ada↔C bindings to liboqs."))
+  (classification
+    (file "container-stack/selur/zig/runtime.zig")
+    (category "UnsafeCode")
+    (classification "legitimate-ffi")
+    (audit "audits/audit-ffi-2026-05-26.md")
+    (rationale "vordr is an eBPF + Zig + Rust container runtime; selur is a Zig sandbox; cerro-torre is an Ada post-quantum component binding liboqs via Ada's pragma Convention/Unchecked_Conversion. All 10 findings are at the Rust↔eBPF kernel boundary, Zig FFI to libc/libcontainer, or Ada↔C bindings to liboqs."))
+  (classification
+    (file "container-stack/cerro-torre/src/core/cerro_crypto.adb")
+    (category "UnsafeCode")
+    (classification "legitimate-ffi")
+    (audit "audits/audit-ffi-2026-05-26.md")
+    (rationale "vordr is an eBPF + Zig + Rust container runtime; selur is a Zig sandbox; cerro-torre is an Ada post-quantum component binding liboqs via Ada's pragma Convention/Unchecked_Conversion. All 10 findings are at the Rust↔eBPF kernel boundary, Zig FFI to libc/libcontainer, or Ada↔C bindings to liboqs."))
+  (classification
+    (file "container-stack/cerro-torre/src/bindings/liboqs.adb")
+    (category "UnsafeCode")
+    (classification "legitimate-ffi")
+    (audit "audits/audit-ffi-2026-05-26.md")
+    (rationale "vordr is an eBPF + Zig + Rust container runtime; selur is a Zig sandbox; cerro-torre is an Ada post-quantum component binding liboqs via Ada's pragma Convention/Unchecked_Conversion. All 10 findings are at the Rust↔eBPF kernel boundary, Zig FFI to libc/libcontainer, or Ada↔C bindings to liboqs."))
+)

audits/audit-ffi-2026-05-26.md

@@ -0,0 +1,28 @@
+<!--
+SPDX-License-Identifier: MPL-2.0
+Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
+-->
+
+# Audit: FFI / systems `unsafe` blocks (stapeln)
+
+**Auditor**: Jonathan D.A. Jewell
+**Date**: 2026-05-26
+**Scope**: panic-attack assail Critical/High `UnsafeCode` (PA001) and `UnsafeFFI` (PA007) findings located under: `container-stack/`.
+**Cross-reference**: campaign tracker [hyperpolymath/panic-attack#32](https://github.com/hyperpolymath/picpath/issues/32).
+**Registry**: `audits/assail-classifications.a2ml`.
+
+## Rationale
+
+vordr is an eBPF + Zig + Rust container runtime; selur is a Zig sandbox; cerro-torre is an Ada post-quantum component binding liboqs via Ada's pragma Convention/Unchecked_Conversion. All 10 findings are at the Rust↔eBPF kernel boundary, Zig FFI to libc/libcontainer, or Ada↔C bindings to liboqs.
+
+The classification is scoped to the listed root(s). Any `unsafe` block outside those roots remains visible to assail.
+
+## Anti-gameability
+
+The registry is a separate file from any source under scan; adding a new `unsafe` block inside a classified root requires a companion classification edit and an update to this audit doc, both of which are visible in the diff.
+
+## Verification
+
+Locally on this branch: `panic-attack assail . --headless` reports the listed PA001/PA007 findings as `suppressed: true`. Any new `unsafe` outside the listed roots remains unsuppressed.
+
+Refs hyperpolymath/panic-attack#32.