feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds

scripts/verify/managed/oracles.mjs

@@ -10,13 +10,12 @@ import { inspectManagedMembersBytes } from "../../../dist/dotnet/ManagedMemberIn
 import { importManagedReconstructionEvidence } from "../../../dist/application/managed/ManagedReconstructionService.js";
 import { createEvidence } from "../../../dist/domain/evidence.js";
 import { MANAGED_STATIC_PROVIDER } from "../../../dist/domain/investigationProviders.js";
-import { createManagedManifestVerifier } from "./manifest.mjs";
+import { verifyManagedAppManifest } from "./manifest.mjs";
 
 const execFileAsync = promisify(execFile);
 
 export const createManagedConformanceOracleSupport = (context) => {
-  const verifier = createManagedManifestVerifier(context);
-  const support = { ...context, ...verifier };
+  const support = { ...context, verifyManagedAppManifest };
   return {
     runManagedAppManifestSelfTest: () => runManagedAppManifestSelfTest(support),
     runOptionalManagedAppManifest: () => runOptionalManagedAppManifest(support),
@@ -29,16 +28,8 @@ async function runManagedAppManifestSelfTest(context) {
     methodName: "PinnedSemanticSlice",
     ilBody: context.defaultIlBody,
   });
-  const artifact = inspectManagedArtifactBytes(
-    sample.bytes,
-    sample.target,
-    context.inspectionLimits,
-  );
-  const members = inspectManagedMembersBytes(
-    sample.bytes,
-    sample.target,
-    context.memberLimits,
-  );
+  const artifact = inspectManagedArtifactBytes(sample.bytes, sample.target);
+  const members = inspectManagedMembersBytes(sample.bytes, sample.target);
   const method = members.methods[0];
   assert.ok(method);
   const summary = await context.verifyManagedAppManifest(
@@ -132,16 +123,8 @@ async function runOptionalIlspyOracle(context) {
   const sample = await context.fixture("ilspy-oracle.exe", {
     methodName: "PinnedSemanticSlice",
   });
-  const artifact = inspectManagedArtifactBytes(
-    sample.bytes,
-    sample.target,
-    context.inspectionLimits,
-  );
-  const members = inspectManagedMembersBytes(
-    sample.bytes,
-    sample.target,
-    context.memberLimits,
-  );
+  const artifact = inspectManagedArtifactBytes(sample.bytes, sample.target);
+  const members = inspectManagedMembersBytes(sample.bytes, sample.target);
   const method = members.methods[0];
   ensureIlspy(method !== undefined, "source-owned fixture has no method");
   const listOutput = await runIlspy(
@@ -167,7 +150,6 @@ async function runOptionalIlspyOracle(context) {
     "ilspycmd C# output exceeded the managed reconstruction import bound",
   );
   const reconstructionImport = importIlspyReconstruction({
-    context,
     sample,
     method,
     members,
@@ -210,7 +192,6 @@ async function runOptionalIlspyOracle(context) {
 }
 
 function importIlspyReconstruction({
-  context,
   sample,
   method,
   members,
@@ -223,7 +204,7 @@ function importIlspyReconstruction({
     MANAGED_STATIC_PROVIDER,
     {
       operation: "inspect_managed_members",
-      parameters: context.memberLimits,
+      parameters: {},
       result: members,
       rawResult: null,
       limitations: members.limitations,