Documentation
Docs44. Audit History & Testing

44. Audit History & Testing

The kortana-node C++23 codebase undergoes rigorous and continuous internal auditing.

  • Test Suite: The protocol relies on over 1,783 automated tests, spanning unit, property, and Byzantine-fault integration testing.
  • Sanitizers: The Continuous Integration pipeline runs builds under ASan (AddressSanitizer), UBSan (UndefinedBehaviorSanitizer), and TSan (ThreadSanitizer) to catch memory leaks, out-of-bounds memory accesses, and thread race conditions before they merge.
  • RPC Fuzzing: The HTTP/WS RPC server is systematically fuzzed with over 100,000 malformed requests to ensure connection handlers do not crash under stress.
  • KVM Bytecode Fuzzing: The KVM bytecode interpreter is subjected to coverage-guided fuzzing to ensure malformed .kvm files cleanly revert execution rather than causing process segmentation faults.