zeroize-audit

Detects missing and compiler-optimized-away zeroization of sensitive data in C/C++/Rust source code with assembly and IR-level proof. Detect missing zeroization of sensitive data in source code and identify zeroization that is removed or weakened by compiler optimizations (e.g., dead-store elimination), with mandatory LLVM IR/asm evidence. Capabilities include: See {baseDir}/schemas/input.json for the full schema. Key fields: Before running, verify the following. Each has a defined failure mode. C/C++ prerequisites: Rust prerequisites: Common prerequisite: The following are recognized as valid zeroization. Configure additional entries in {baseDir}/configs/ . C/C++ Rust Findings are grouped by required evidence.