feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds

docs/kernel-modules.md

@@ -83,9 +83,22 @@ that `struct module`, symbol-table records, or certificate chains were decoded.
 The selected file is limited to 64 MiB by default (512 MiB maximum). At most
 8192 `.modinfo` and `__versions` entries plus listed `__ksymtab*` sections are
 examined by default (65536 maximum); `coverage.examined_entries` counts all
-three. Exceeding that budget fails with no partial success. Keys longer
-than 256 bytes and values longer than 4096 bytes stay malformed per entry;
-the field that fits is still copied. A `__ksymtab*` section name longer than
+three. Exceeding that budget fails with no partial success. `.modinfo` keys
+retain at most 256 bytes and values at most 4096 bytes by default. A larger
+field becomes `null` and is named in the entry's `omitted_fields`; the field
+that fits is still copied. Structural `status` and `reason` remain independent:
+a terminated, nonempty `key=value` entry stays `observed` when its text is
+omitted, while overall coverage becomes `partial`. Source range and digest
+remain available.
+
+Raise `max_modinfo_key_bytes` or `max_modinfo_value_bytes` on the next MCP call
+to retain the omitted text. The returned limitation names the required byte
+budget. CLI flags are `--max-modinfo-key-bytes` and `--max-modinfo-value-bytes`.
+Each accepts an integer from 1 through 536870912 bytes, matching the maximum
+input size. No restart is required; file, entry and raw-hex budgets do not
+change. These are per-call controls, not runtime settings.
+
+A `__ksymtab*` section name longer than
 256 bytes keeps its range with `name: null` and `ksymtab_name_exceeds_limit`. Inline raw hex stops at 4096 bytes and
 the SHA-256 remains.