N0zoM1z0 and gensokyo-dev
1a446cdade
fix(ntfs): label the system flag independently of extensions
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
N0zoM1z0 and gensokyo-dev
1ef7f02cae
test(ntfs): group MFT header and fixup regressions
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
N0zoM1z0 and gensokyo-dev
7b86474be7
test(artifacts): use the MFT traversal iterable contract
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
N0zoM1z0 and gensokyo-dev
5d10337709
feat(artifacts): expose a bounded sample of MFT record headers
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
N0zoM1z0 and gensokyo-dev
8eadb872f2
fix(ntfs): preserve full-width MFT log sequence numbers
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
N0zoM1z0 and gensokyo-dev
f170175ec8
fix(artifacts): retry interrupted MFT preparation
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
N0zoM1z0 and gensokyo-dev
fbe09f84df
fix(artifacts): verify MFT source before publishing metadata
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
N0zoM1z0 and gensokyo-dev
ebb480ba22
fix(ntfs): buffer the admitted MFT byte range once
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
N0zoM1z0 and gensokyo-dev
da1f029c2f
fix(artifacts): admit MFT captures through CLI and MCP
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
N0zoM1z0 and gensokyo-dev
4db9c166ef
fix(ntfs): report contradictory FILE record extents
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
N0zoM1z0 and gensokyo-dev
29fd6a7d03
fix(ntfs): accept older FILE record headers
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
N0zoM1z0 and gensokyo-dev
d7338876d6
fix(ntfs): reject malformed MFT update sequence arrays
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
N0zoM1z0 and gensokyo-dev
9df3f7174f
fix(ntfs): keep record identity across invalid MFT slots
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
N0zoM1z0 and gensokyo-dev
79e476204f
fix(ntfs): preserve MFT reference sequence numbers
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 10:03:35 +08:00
2SinceJuly
9c95218374
style(artifacts): apply the repository formatter to the MFT reader
...
The new NTFS $MFT files were committed unformatted, so the Static checks lane
failed on format:check. Formatting only; no behaviour change.
(cherry picked from commit dc6a6d40ff
2026-11-11 10:03:35 +08:00
2SinceJuly
d9d2641981
feat(artifacts): inventory NTFS $MFT record headers offline
...
An acquired $MFT stream had no reader, so an analyst holding one could only
treat it as an opaque file. Recognize the FILE signature of the first record
and inventory every record's header: sequence number, flags, used and total
bytes, base record reference and update-sequence array.
Each record's update-sequence fixups are verified against its sector
trailers. A mismatch keeps the header facts, is reported on the record and is
counted in the metadata, so a record that was not cleanly written is visible
rather than silently accepted. A missing or short array is reported as
unverified, a wrong signature stops the scan at its offset, and a trailing
partial record is reported as a byte count. Attributes, filenames and the
$UsnJrnl:$J journal are not decoded, so no path or change history is claimed.
Part of #9867
(cherry picked from commit ccb45f5712
2026-11-11 10:03:35 +08:00
morluto
e2585aa7ce
test(ghidra): qualify instruction mode with real provider
2026-11-10 17:58:04 -05:00
morluto
1d1c7f98ff
test(ci): repair verifier fixtures and cleanup assertions
2026-11-10 17:58:04 -05:00
morluto
b1f1b3eff3
fix(javascript): recognize inherited environment for NaN
2026-11-10 17:58:04 -05:00
morluto
c1d0f2bb45
fix(environment): retain response cleanup through shutdown
2026-11-10 17:58:04 -05:00
morluto
04de5f3200
fix(artifacts): recover interrupted reader preparation
2026-11-10 17:58:04 -05:00
morluto
fe791ff159
fix(browser): mask unused PNG transparency key bits ( #9890 )
2026-11-10 17:39:53 -05:00
morluto
4082375e73
fix(verifiers): preserve results and own cleanup through completion
...
Attempt independent resource cleanup without losing primary failures, retain unresolved owners, and publish completion after release. Bound existing producer commands, preserve helper return values, and settle startup and fixture children on failure.
Validation: 29 focused boundary tests passed; actual helper-value and import-bound filesystem cleanup controls passed. The real inert-child termination control and targeted JavaScript binding checks passed, alongside typecheck, lint and formatting. Live Ghidra, Cutter, Electron GUI and Windows addon qualification was not run.
2026-11-10 17:03:59 -05:00
morluto
dcee59f273
test: strengthen independent oracles and consolidate boundary coverage
...
Require delivered facts, exact cancellation and malformed-input boundaries, and independent metadata expectations. Transfer unique assertions into stronger keepers before removing duplicate cases and overwritten fixture writes; preserve all consumed core fixture bytes.
Validation: 1,190 focused tests passed with 39 platform-dependent skips; 134 composition and conformance tests passed. Typecheck, lint, formatting, discovery and Knip passed. Independent preservation reviews and targeted regression controls passed.
2026-11-10 17:03:59 -05:00
morluto
31018cf037
test: retain failed prompt harness cleanup for retry
2026-11-10 16:50:24 -05:00
morluto
17f0c6944c
test: require exact public views and export receipts
2026-11-10 16:50:24 -05:00
morluto
360cd6f438
test: isolate managed result algebra and preserve partial facts
2026-11-10 16:50:24 -05:00
morluto
b129d39ac9
test: verify CLI failure status and cancellation stage ownership
2026-11-10 16:50:24 -05:00
morluto
fbb785293b
test: reject swallowed native binding assertions and cloned causes
2026-11-10 16:50:24 -05:00
morluto
1b8a7ee7f6
test: name the observed IL2CPP image retention witness
2026-11-10 16:50:15 -05:00
morluto
86b1b1431a
test: preserve method-free IL2CPP overflow verification
2026-11-10 16:48:48 -05:00
morluto
d5e2d59eb6
test: reject incomplete calibration receipts and section drift
2026-11-10 16:48:48 -05:00
morluto
03e43c0f1b
test: bound compiler and startup fixture commands with existing owner
2026-11-10 16:47:10 -05:00
morluto
724211b468
test: finish independent session cleanup and completion gates
2026-11-10 16:47:10 -05:00
morluto
fe1a5b1498
test: join the admitted command after caller signal assertions
2026-11-10 16:47:10 -05:00
morluto
fc3f18b748
test: prove caller cancellation reaches owned commands
2026-11-10 16:44:32 -05:00
morluto
0a66fb2acf
test: require independently observed verifier outcomes
2026-11-10 16:44:32 -05:00
morluto
56d2ba36b8
test: preserve provider harness cleanup and parser admission
2026-11-10 16:43:39 -05:00
morluto
0ea642843a
test: retain independent ownership of fake GDB processes
2026-11-10 16:43:39 -05:00
morluto
0c37c22d51
test: remove copied authentication after command cleanup failure
2026-11-10 16:43:39 -05:00
morluto
b32da4aefa
test: remove the retired reactive process fixture
2026-11-10 16:43:39 -05:00
morluto
c8a52fd478
test: preserve relational policy and cumulative read coverage
2026-11-10 16:43:39 -05:00
morluto
67f402fb81
test: consolidate duplicate artifact and session coverage
2026-11-10 16:41:40 -05:00
morluto
1ef28be5bc
test: tighten filesystem configuration and read contracts
2026-11-10 16:41:40 -05:00
morluto
de0c50ead7
test: assert artifact integrity and retained descriptor ownership
2026-11-10 16:41:40 -05:00
morluto
fe4105187d
test: remove fixtures for retired controlled replay
2026-11-10 16:40:47 -05:00
morluto
b05f472592
test: exercise CI trust and remote cache authority policies
2026-11-10 16:40:47 -05:00
morluto
38286d4bc3
test: preserve repeated attribute URL node identity
2026-11-10 16:36:38 -05:00
morluto
15e3a73ba6
fix: pass verifier timeouts through current MCP SDK options
2026-11-10 16:35:41 -05:00
morluto
38dc9d246b
test: own and bound Electron hook fixture processes
2026-11-10 16:32:53 -05:00
