feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds

tests/acceptance/kernelModuleCli.test.ts

@@ -9,6 +9,43 @@ import {
 import { createTestTempDirectory } from "../fixtures/temporaryDirectory.js";
 import { cliTest } from "../support/cli/cliFixture.js";
 
+cliTest(
+  "honors modinfo field retention budgets through CLI flags",
+  async ({ cli }) => {
+    const root = await createTestTempDirectory("rea-kernel-module-text-cli-");
+    const path = join(root, "text.ko");
+    const key = "k".repeat(257);
+    const value = "v".repeat(4097);
+    await writeFile(
+      path,
+      kernelModuleFixture({ modinfo: Buffer.from(`${key}=${value}\0`) }),
+    );
+    const result = await cli.run({
+      arguments: [
+        "inspect-kernel-module",
+        path,
+        "--max-modinfo-key-bytes",
+        "257",
+        "--max-modinfo-value-bytes",
+        "4097",
+        "--json",
+      ],
+    });
+    expect(result.exitCode, result.stderr).toBe(0);
+    const evidence = toolContract("inspect_kernel_module").outputSchema.parse(
+      result.json,
+    );
+    expect(evidence.normalized_result.modinfo?.entries[0]).toMatchObject({
+      key,
+      value,
+      status: "observed",
+      reason: null,
+      omitted_fields: [],
+    });
+    expect(evidence.normalized_result.coverage.status).toBe("complete");
+  },
+);
+
 cliTest(
   "reports license, duplicate aliases, and version CRCs through the public CLI",
   async ({ cli }) => {