{
  "schema_version": 2,
  "new_file_max_lines": 1000,
  "tracked_monoliths": [
    {
      "path": "src/detect/int_overflow.cpp",
      "max_lines": 1100,
      "target_lines": 1000
    },
    {
      "path": "src/detect/oob_access.cpp",
      "max_lines": 1100,
      "target_lines": 1000
    },
    {
      "path": "src/detect/int_overflow_analysis.cpp",
      "max_lines": 1100,
      "target_lines": 1000,
      "next_extraction": "container-bounded callee-arithmetic helpers"
    },
    {
      "path": "src/detect/null_deref.cpp",
      "max_lines": 1100,
      "target_lines": 1000,
      "next_extraction": "shouldQuery alias-resolution chain"
    },
    {
      "path": "src/symbolic/encoder_foundation.cpp",
      "max_lines": 1100,
      "target_lines": 1000,
      "next_extraction": "identity-key + member-cache helpers"
    }
  ],
  "architecture": {
    "forbidden_patterns": [
      {
        "name": "direct shell subprocess outside approved compatibility boundaries",
        "regex": "\\b(popen|system)\\s*\\(",
        "paths": ["src/**", "include/fold/**"],
        "allow": ["src/frontend/comp_db.cpp"]
      },
      {
        "name": "direct sh -c outside the radare2 session adapter",
        "regex": "\"/bin/sh\", \"sh\", \"-c\"",
        "paths": ["src/**", "include/fold/**"],
        "allow": ["src/binary/r2_session.cpp"]
      }
    ]
  }
}