morluto
70a8325c38
fix(setup): preserve existing configuration mode ( #7942 )
2026-10-29 08:59:56 +08:00
morluto
33d6975749
fix(certificates)!: disclose undecoded unsigned attributes ( #7920 )
...
* fix(certificates): disclose undecoded unsigned attributes
* test(certificates): use parser-owned limitation text
2026-10-29 08:56:07 +08:00
morluto
0386efd1e1
fix(pcap): retain producer contradiction diagnostics ( #7937 )
...
* fix(pcap): retain producer contradiction diagnostics
* test(pcap): align DNS fixture with empty captures
2026-10-29 08:43:14 +08:00
morluto
640e19d79d
fix(native)!: own Mach-O load commands in binary reader ( #7952 )
...
* fix(native): retain selected Mach-O slice identity
* fix(native)!: own Mach-O load commands in binary reader
* fix(native): preserve malformed Mach-O and image base limits
* fix(native): preserve leading BOM in Mach-O names
* test(native): update Mach-O provenance verification
* fix(native): retain completed Mach-O inspection on cleanup failure
* fix: bound Mach-O projected section output
* fix(native): own retained Mach-O command bytes
* fix(native): retain Mach-O outcomes on final cancellation
* fix(cli): preserve caller path in partial evidence
* fix: reserve Mach-O projection envelope budget
2026-10-29 08:37:36 +08:00
ShuaixinHuang and morluto
3a46047aa7
fix(pe): reject surrogate code units in BMPString names ( #7817 )
...
* fix(pe): reject surrogate code units in BMPString names
* chore: preserve base browser imports
---------
Co-authored-by: morluto <76467478+morluto@users.noreply.github.com >
2026-10-29 08:20:32 +08:00
morluto
ef9ab91e42
fix(il2cpp): validate retained declaring type relationships ( #7946 )
2026-10-29 08:16:57 +08:00
morluto
c7722c8eeb
fix(cli): honor token controls for builtin documents ( #7897 )
2026-10-29 08:11:19 +08:00
morluto
3a512303d9
fix(cli)!: refuse lossy text output ( #7852 )
...
* fix(cli)!: refuse lossy text output
* fix(cli): retain failure identity on text refusal
* fix(cli): check failed TOON token windows
* test(cli): bound keyed archive case duration
2026-10-29 08:09:49 +08:00
morluto
794907fa3d
fix(javascript): trace boundary results to assigned bindings ( #7912 )
2026-10-29 07:58:57 +08:00
morluto
2129c17925
fix(native): retain selected Mach-O slice identity ( #7940 )
2026-10-29 07:57:19 +08:00
morluto
844bb46351
fix(javascript): retain Electron switch conditions ( #7910 )
...
* fix(javascript): retain Electron switch conditions
* fix(javascript): bound switch path traversal
2026-10-29 07:56:15 +08:00
morluto
f256492ff3
fix(apple): recognize AppKit cell ownership ( #7916 )
2026-10-29 07:55:05 +08:00
morluto
66f5b650d9
fix(apk): explain unknown signer comparison ( #7927 )
2026-10-29 07:53:38 +08:00
hhang and hhang
07dfd12613
fix(pe): reject non-MZ inputs before image inspection ( #7709 )
...
Co-authored-by: hhang <169027046+xu91102@users.noreply.github.com >
2026-10-29 07:45:32 +08:00
ShuaixinHuang
9ac9f91ab5
fix(firmware): validate Intel HEX start-record offsets ( #7806 )
2026-10-29 07:37:39 +08:00
RRFZ and morluto
8c83886891
fix(pe): report exhausted certificate decoder allowances as resource limits ( #7881 )
...
* fix(pe): report exhausted certificate decoder allowances as resource limits
A PKCS#7 payload that exhausted the fixed 64 KiB decoded-text or 16,384-value ASN.1 allowance was refused as malformed input with advice to correct request fields. Keep the allowance and limit on the decoder failure and report it as a nonretryable resource_constraint with fixed-allowance recovery.
Fixes #7531
* test(pe): cover certificate allowances through MCP
---------
Co-authored-by: morluto <76467478+morluto@users.noreply.github.com >
2026-10-29 07:36:56 +08:00
morluto
fd297b1b17
fix(apple): preserve bounded archive diagnostics ( #7890 )
...
* fix(apple): preserve bounded archive diagnostics
* test(apple): assert diagnostic facts without freezing prose
2026-10-29 07:36:29 +08:00
morluto
16cfe30dab
fix(setup): identify invalid launch environment overrides ( #7899 )
...
* fix(setup): identify invalid launch environment overrides
* test(setup): cover merged environment recovery
2026-10-29 07:34:43 +08:00
morluto
f9acfdcf49
fix(cli): retain committed evidence receipts on output failure ( #7906 )
2026-10-29 05:11:02 +08:00
morluto
83cd1e04c9
fix(javascript)!: report ambiguous artifact paths ( #7864 )
...
* fix(javascript): report ambiguous artifact paths
* fix(javascript): retain unavailable colliding sources
2026-10-29 05:10:18 +08:00
morluto
29945d435d
fix(process): preserve availability when macOS ownership preparation fails ( #7856 )
...
* fix(process): preserve availability when macOS ownership preparation fails
* test(process): verify affected macOS provider availability
2026-10-29 05:10:04 +08:00
morluto
cc5a4062ff
fix(browser): preserve unknown WebMCP comparison facts ( #7833 )
2026-10-29 05:09:22 +08:00
morluto
583a316e11
fix(macho): preserve POSIX app executable names ( #7888 )
2026-10-29 05:08:17 +08:00
morluto
f6380282fb
fix(web)!: retain invalid browser selection ( #7903 )
...
fix(web): retain invalid browser selection
2026-10-29 05:08:02 +08:00
morluto
5f146b3b19
fix(ida): retain selected endpoint on connection failures ( #7894 )
...
* fix(ida): retain selected endpoint on connection failures
* fix(ida): redact encoded endpoint credentials and preserve causes
2026-10-29 05:07:02 +08:00
morluto
553f19590f
fix(harmony): exclude symlinks from unavailable files ( #7886 )
2026-10-29 05:05:35 +08:00
morluto
52617bd50e
fix(model): recognize safetensors ZIP signature collisions ( #7816 )
2026-10-29 04:59:25 +08:00
morluto
675c73fb4d
fix(apple): preserve post-table plist objects ( #7820 )
2026-10-29 04:59:14 +08:00
morluto
b0880d660f
fix(qlog): exclude hidden custom events from incomplete facts ( #7825 )
2026-10-29 04:58:53 +08:00
morluto
2dd9a3092e
fix(artifacts): extract readable inventoried entries ( #7827 )
...
* fix(artifacts): extract readable inventoried entries
* test(artifacts): align directory omission coverage
2026-10-29 04:58:43 +08:00
morluto
5c60720ad7
fix(pe): distinguish bounded imphash name reads ( #7830 )
2026-10-29 04:58:33 +08:00
morluto
9b7c2bb1ac
fix(javascript): retain anchored route constants under reserved prefixes ( #7838 )
2026-10-29 04:58:22 +08:00
morluto
fe52ea12c3
fix(evidence): explain fixed analysis view page recovery ( #7860 )
...
* fix(evidence): explain fixed analysis view page recovery
* fix(evidence): explain unpublished view recovery
2026-10-29 04:55:53 +08:00
gensokyo-dev
8f9af920ef
fix(pcap): redact HTTP credentials in failed capture diagnostics ( #7871 )
...
Project bounded JSON diagnostics using shared URI roles and source spans.
Keep complete parser input unchanged and compute safe diagnostics lazily.
Preserve byte facts, error classification, path data and cleanup ownership.
Reuse JSON escape-coordinate mapping with IDA diagnostics.
Fixes #7812
Assisted-by: Reimu (gensokyo-skills:reimu-incident-triage)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)
Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
2026-10-28 18:14:22 +00:00
gensokyo-dev
4b0ff68e2e
fix(browser): retain prior-hop response facts in session timelines ( #7807 )
...
* fix(browser): retain prior-hop response facts in session timelines
* fix(browser): share response URL classification
* fix(browser): preserve malformed response status failures
* fix(browser): account for filtered redirect response coverage
* test(browser): supply prior response URLs in redirect fixtures
* fix(browser): retain malformed orphan response status coverage
2026-10-29 02:04:15 +08:00
morluto
44331d04d2
fix(browser): retain launch failure diagnostics ( #7826 )
2026-10-29 01:56:39 +08:00
morluto
0a272d5cf5
fix(capture): bound preview headlines by source format ( #7832 )
...
* fix(capture): bound preview headlines by source format
* test(capture): cover scalar HAR preview extensions
2026-10-29 01:56:07 +08:00
morluto
0747e46401
fix(cli): recognize integrity failures with partial observations ( #7836 )
2026-10-29 01:55:57 +08:00
morluto
183e2e2d1e
fix(il2cpp): validate structural record extents ( #7861 )
2026-10-29 01:55:47 +08:00
morluto
5119d08daf
fix(web): preserve portable captured script paths ( #7862 )
2026-10-29 01:55:38 +08:00
morluto
5bef2b48b6
fix(input)!: classify unresolvable source paths ( #7847 )
2026-10-29 01:52:34 +08:00
morluto
e79ad6ca8e
fix(jeb): preserve selected endpoint in failures ( #7835 )
...
* fix(jeb): preserve selected endpoint in failures
* fix(jeb): retain endpoint on typed failures
2026-10-29 01:30:24 +08:00
morluto
128c2cf632
fix(sqlite): report SQL statement resource allowance ( #7829 )
2026-10-29 01:30:08 +08:00
morluto
aaf4d21068
fix(source-map): clarify policy and evidence provenance ( #7828 )
2026-10-29 01:29:59 +08:00
morluto
aba158506b
fix(javascript): preserve repeated native resolver calls ( #7824 )
2026-10-29 01:29:48 +08:00
morluto
477f63ae21
fix(session)!: classify unavailable snapshot prerequisites ( #7837 )
...
fix(session): classify unavailable snapshot prerequisites
2026-10-29 01:28:57 +08:00
morluto
f9e7571a3d
feat(javascript): discover semantic call literals in feature traces ( #7840 )
...
* feat(javascript): discover semantic call literals in feature traces
* fix(javascript): bound retained call literals by transfer capacity
* test(javascript): align feature no-match diagnostic
2026-10-29 01:25:23 +08:00
morluto
685f6db960
fix(browser): preserve unknown CDP source coordinates ( #7842 )
2026-10-29 01:23:56 +08:00
morluto
d49a1504ca
fix(erlang): respect legacy atom table layout ( #7844 )
2026-10-29 01:23:17 +08:00
morluto
4109271bcb
fix(process)!: reject unsupported one-column terminals ( #7848 )
...
* fix(process)!: reject unsupported one-column terminals
* test(process): exercise actual two-column resize
2026-10-29 01:23:02 +08:00