Cursor rule

1---
2description: 
3globs: 
4alwaysApply: true
5---
6# Security Rules for Fasten
7 
8## Input Validation
9- Validate all file paths to prevent traversal.
10- Limit input file size and check permissions.
11- Validate and sanitize all input before processing.
12 
13## Build & Runtime Security
14- Use only Zig stdlib; audit any external dependencies.
15- Reproducible, signed builds; secure distribution.
16- Strict memory management; bounds checking; safe allocations.
17- No sensitive info in error messages or logs.
18 
19## Reporting Vulnerabilities
20- Do NOT report via public issues. Email security@fasten-bundler.dev with details.
21- Acknowledge within 48h, resolve critical issues within 30 days.
22 
23## User Best Practices
24- Only process trusted files; verify file integrity.
25- Run in sandbox for untrusted input.
26- Keep system/tools updated; secure storage and access.
27 
28## Hardening
29- Build with `zig build -Doptimize=ReleaseSafe`.
30- Use resource limits (ulimit) and minimal permissions for runtime.
31