mirror of https://github.com/storytold/pdfcraft.git synced 2026-11-03 06:51:50 -06:00

Files

T

ejbarrazaandErick Barraza f0c877ca23 audit: harden finding classes with golden tests and docs (#1892 )

- Pin FindingKind stable IDs (covered-text, unapplied-mark) with a test
  and document the no-rename contract on id()
- Golden tests pinning the full AuditFinding struct for both finding
  classes (page, kind, exact rect, covered text)
- Depth-limit boundary tests: 32 nested form XObjects audit clean,
  33 fail closed with TooDeep
- Fix stale crate docs: m/l axis-aligned rectangles count as covers (#1510)
- Document AuditFinding.rect normalization and covered_text joining

Tests + docs only, no behavior change.

Co-authored-by: Erick Barraza <ejbarraza1994@gmail.com>

2026-10-15 02:27:44 -04:00

src

audit: harden finding classes with golden tests and docs (#1892 )

2026-10-15 02:27:44 -04:00

Cargo.toml

Add faux-redaction audit (paint-order and colour-aware, fail-closed) (#110 )

2026-10-11 14:32:33 -04:00

README.md

fix(audit): a rectangle drawn as an m/l path is a cover like re (#1521 )

2026-10-13 00:07:15 -04:00

README.md

pdfcraft-audit

Layer L4 (may use edit): verification tooling, the faux-redaction audit.

let findings: Vec<Finding> = audit_redactions(&doc)?;  // page, kind, rect, covered_text

It reports two kinds of finding:

faux redaction: an opaque filled rectangle painted after text it overlaps, dark enough against the text's colour (WCAG contrast below 3) to hide it, while the text is still extractable underneath;
unapplied mark: a Redact annotation that was marked but never applied.

A properly applied redaction removes the text, so it never flags. Page backgrounds, table shading and highlights don't either: they're painted before the text, or light against it.

Limits, by design and documented rather than hidden:

only filled rectangles count as covers, drawn with re or as a single m/l subpath whose corners form an axis-aligned rectangle (not other paths, shadings or patterns), and a translucent one (/ca below 1) is not flagged;
covers inside form XObjects are found, but only text drawn directly in the page content is checked under them;
annotation rectangles are compared in unrotated user space, so /Rotate pages may misalign.

It fails closed: an undecodable content stream, malformed /Annots, form XObjects nested deeper than 32 or in a cycle, or a walk past the operator bound is an error, never "no findings".

Surfaces: the redact_audit automation tool and pdfcraft-cli.