fix(release): support Linux ARM64 builds

.github/workflows/rust-spike.yml

@@ -31,6 +31,26 @@ on:
       - ".github/workflows/rust-spike.yml"
 
 jobs:
+  linux-arm64-build:
+    name: Linux ARM64 release build
+    runs-on: ubuntu-24.04-arm
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
+
+      - name: Install rust toolchain (pinned by rust/rust-toolchain.toml)
+        run: rustup show
+
+      - uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: rust
+
+      - name: Build shipped native binaries
+        working-directory: rust
+        run: cargo build --release --locked -p decided -p decided-mcp
+
   windows-runtime:
     name: Windows native runtime smoke
     runs-on: windows-latest

rust/rac-engine/src/federation.rs

@@ -971,7 +971,7 @@ fn scan_yaml_events(yaml: &str) -> Result<RestrictedYamlScan, (Option<u64>, Stri
             } else {
                 // SAFETY: libyaml exposes a NUL-terminated problem string while
                 // the parser is alive.
-                unsafe { CStr::from_ptr(parser.0.problem) }
+                unsafe { CStr::from_ptr(parser.0.problem.cast()) }
                     .to_string_lossy()
                     .into_owned()
             };