Project Structure
=================

::

    src/
    +-- main.rs              # CLI entry point and argument parsing
    +-- prelude.rs           # Common imports and type definitions
    +-- analyze/             # Core analysis engine
    |   +-- mod.rs           # Project analysis orchestration
    |   +-- cfg.rs           # Control-flow graph construction
    |   +-- context.rs       # Cross-file project context
    |   +-- dataflow.rs      # Reaching definitions analysis
    |   +-- function_summary.rs  # Inter-procedural function summaries
    |   +-- null_state.rs    # CFG-based null state dataflow
    |   +-- prescan.rs       # Directory pre-scanning for cross-file context
    |   +-- suppression.rs   # Violation suppression system
    +-- export/              # Export functionality
    |   +-- mod.rs           # CSV, XLSX, JSON, and SARIF export
    +-- files/               # File and repository handling
    |   +-- mod.rs           # Git integration and file discovery
    +-- manifest/            # Rule configuration system
    |   +-- mod.rs           # TOML manifest parsing and validation
    +-- parser/              # C code parsing
    |   +-- mod.rs           # Tree-sitter C parser integration
    +-- progress.rs          # CLI progress reporting
    +-- rules/               # CERT C rule implementations
    |   +-- mod.rs           # Rule trait and registry
    |   +-- cert_c/          # Individual CERT C rule modules (17 categories)
    |       +-- API/         # API rules (9 rules)
    |       +-- ARR/         # Array rules (9 rules)
    |       +-- CON/         # Concurrency rules (23 rules)
    |       +-- DCL/         # Declaration rules (31 rules)
    |       +-- ENV/         # Environment rules (8 rules)
    |       +-- ERR/         # Error handling rules (11 rules)
    |       +-- EXP/         # Expression rules (31 rules)
    |       +-- FIO/         # I/O rules (35 rules)
    |       +-- FLP/         # Floating point rules (13 rules)
    |       +-- INT/         # Integer rules (23 rules)
    |       +-- MEM/         # Memory rules (17 rules)
    |       +-- MSC/         # Miscellaneous rules (10 rules)
    |       +-- POS/         # POSIX rules (20 rules)
    |       +-- PRE/         # Preprocessor rules (16 rules)
    |       +-- SIG/         # Signal rules (7 rules)
    |       +-- STR/         # String rules (16 rules)
    |       +-- WIN/         # Windows rules (6 rules)
    +-- ui/                  # Terminal user interface
    |   +-- mod.rs           # Ratatui-based interactive UI
    +-- utility/             # Helper functions
        +-- mod.rs           # Common utilities and helpers

    bench/                   # Benchmark infrastructure
    +-- runner.py            # Juliet benchmark runner
    +-- analyzer.py          # Result analysis and scoring
    +-- __main__.py          # Benchmark CLI (python -m bench)

    rules_templates/         # Rule manifests
    +-- rules-all.toml       # All 285 rules enabled
    +-- cwe/                 # Per-CWE manifests for Juliet benchmarking

    docs/                    # Documentation and CI examples
    +-- index.rst            # Master document (Sphinx toctree)
    +-- conf.py              # Sphinx configuration
    +-- azure-pipelines.yml  # Azure DevOps example pipeline

    .github/workflows/       # GitHub Actions
    +-- ci.yml               # CI: fmt, clippy, test, coverage, docs
    +-- release.yml          # Release automation