Matt Van Horn 5b93dabfd7 fix(audit): run the exposure verifier's commands under supervision ...

The verifier launched npm and the CLI with raw execFile and then removed
its temporary tree, so a timed-out child could outlive the tree it was
using.

Use the shared verifier commands and close them before removing the tree.
Their exit error carries stdout on its snapshot, so the audit's exit-code
branch reads it from there.

2026-11-02 02:44:58 -08:00

..

ci

refactor(ci): parse readiness fences with a static expression (#8586)

2026-11-02 03:14:29 +08:00

fixtures

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

lib

fix(test): restrict storage fixture to loopback (#8582)

2026-11-02 02:52:20 +08:00

lint

fix(ci): own mock isolation and normalize Git patch directories

2026-10-25 09:49:26 +08:00

verify

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-tools/skills

fix(ci): run the lockfile-pinned Skills CLI in package verification (#6235)

2026-10-21 21:19:45 -07:00

audit-website-links.py

fix(website): handle UTF-8 output and slash refs in link audits (#4123)

2026-10-23 02:31:11 +08:00

build-conformance-fixtures.mjs

refactor(schema): remove data-only version markers

2026-09-29 08:45:36 +08:00

build-ghidra-nativeaot.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

build-windows-native.mjs

refactor(windows): share native artifact validation

2026-10-26 16:04:44 +08:00

bundle-runtime.d.mts

perf(cli): bundle runtime entries to reduce Windows startup I/O (#1996)

2026-10-12 09:25:27 +08:00

bundle-runtime.mjs

fix(cli): share builtin argument ownership with MCP routing

2026-10-24 03:16:30 +08:00

check-dependency-install.mjs

fix(deps): run freshness check from escaped paths

2026-07-16 19:51:25 +08:00

check-doc-facts.mjs

build: add canonical product catalog and docs drift checks

2026-07-15 17:43:52 +08:00

clean-build-output.mjs

build: separate runtime artifacts and supervise command ownership

2026-10-09 20:11:17 +08:00

create-ghidra-windows-fixture.mjs

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00

electron-active-hook-boundaries.cjs

fix(electron): block trash calls in active observation hook

2026-10-24 02:36:00 +08:00

electron-active-hook.cjs

fix(electron): preserve runtime rejection and exception policies (#8542)

2026-11-02 01:15:08 +08:00

generate-completion-ledger.mjs

refactor(tooling): move completion ledger generation out of domain

2026-10-26 14:46:35 +08:00

generate-error-schema.mjs

chore: migrate formatting to Oxfmt (#615)

2026-10-06 01:59:19 +08:00

generate-mcp-tool-catalog.mjs

build: separate runtime artifacts and supervise command ownership

2026-10-09 20:11:17 +08:00

generate-nativeaot-fixtures.mjs

fix(ghidra): resolve file offsets in decompile (#2101)

2026-10-13 18:23:17 +08:00

generate-package-metadata.mjs

fix(skills): parse metadata only from YAML frontmatter

2026-10-26 15:49:58 +08:00

generate-product-catalog.mjs

fix(build): make catalogs and packaged skills generated outputs (#1086)

2026-10-08 22:43:51 +08:00

generate-skill-metadata.mjs

fix(skills): parse metadata only from YAML frontmatter

2026-10-26 15:49:58 +08:00

generate-third-party-inventory.mjs

fix: align MCP archive contracts and documentation (#2478)

2026-10-13 12:06:41 +08:00

hopper-demo-x11.py

fix(hopper): distinguish an absent demo dialog from publisher rejection (#8074)

2026-10-30 18:29:18 +08:00

plugin-mcp-launcher.mjs

feat(plugins): make Claude Code and Codex installs self-contained (#7514)

2026-10-27 17:13:17 +00:00

prepack.mjs

refactor(cli): share process environment preparation

2026-10-24 11:50:11 +08:00

prepare-reverse-tools-mutation.mjs

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

prepare-website.py

feat(website): add multilingual editions and translation workflow

2026-10-11 17:24:46 +08:00

prepare.mjs

fix(build): prepare release dependency types during installation (#6978)

2026-10-24 09:24:43 +00:00

print-mcp-config.mjs

fix(npm): use latest entry points without install scripts

2026-07-17 00:16:46 +00:00

rea-android-workspace-guardian.mjs

fix(android): clean Windows workspaces after owner termination (#2440)

2026-10-13 22:03:16 +08:00

rea.mjs

feat(guidance): search installed workflow sections (#6996)

2026-10-29 16:47:10 +08:00

record-catalog-digests.mjs

feat(mcp): support compact output schema advertisements (#7218)

2026-10-26 17:59:51 +08:00

record-mcp-catalog.mjs

perf(mcp): defer analysis runtime after catalog discovery (#4424)

2026-10-22 03:07:31 +00:00

release-notes.mjs

fix(release): avoid duplicated contributor thanks

2026-10-11 11:49:49 +08:00

release-npm-tag.mjs

refactor(release): remove obsolete tag CLI and proposal output

2026-10-24 11:41:34 +08:00

release-proposal.mjs

refactor(release): remove obsolete tag CLI and proposal output

2026-10-24 11:41:34 +08:00

run-development-tests.mjs

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

run-exact-tests.mjs

fix(test): reject excluded symlink aliases in exact selection

2026-10-14 13:58:17 +08:00

run-exclusive-command.mjs

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

run-exclusive.mjs

fix(runner): scope internal Node notices to the supervisor (#7020)

2026-10-24 15:57:23 +00:00

run-python-tests.py

fix: streamline tests and preserve Darwin process ownership (#8275)

2026-10-31 16:43:04 +08:00

run-turbo.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-typescript.d.mts

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-typescript.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

scan-todos.mjs

chore(scripts): merge duplicate node:fs import in scan-todos (#1790)

2026-10-11 18:18:10 +08:00

test-website.py

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-adb.mjs

fix(ci): repair verifier fixtures and formatting failures

2026-11-02 10:59:40 +08:00

verify-agent-experience.mjs

fix(skills): parse metadata only from YAML frontmatter

2026-10-26 15:49:58 +08:00

verify-agentenv-environment.mjs

feat(environment): build agent environments from a prompt (#6946)

2026-10-24 21:51:41 +08:00

verify-apk-signature.mjs

fix(cli): preserve caller paths in format inspections (#7855)

2026-10-29 09:26:22 +08:00

verify-apktool.mjs

feat(apktool): share one APK resource decode across selected locale tables (#4777) (#4804)

2026-10-18 03:57:17 +08:00

verify-binary-layout.mjs

refactor(verifiers): centralize named artifact output admission

2026-10-26 22:48:22 +08:00

verify-browser-dom-destinations.mjs

fix(verification): retain browser profile until shutdown

2026-10-27 13:42:36 +08:00

verify-browser-modules.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-network.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-request.mjs

feat(environment): build agent environments from a prompt (#6946)

2026-10-24 21:51:41 +08:00

verify-browser-runtime.mjs

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

verify-browser-scripts.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-source-maps.mjs

fix(verifiers): require positive ownership and restore cleanup coverage

2026-10-14 09:47:57 +08:00

verify-bun-standalone.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-claude-client.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-commandcode-client.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-conformance-fixtures.mjs

refactor: consolidate binary artifact interpretation and fixture ownership

2026-10-26 16:21:11 +08:00

verify-copilot-client.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-deepseek-client.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-evm-interface.mjs

refactor(verifiers): centralize named artifact output admission

2026-10-26 22:48:22 +08:00

verify-flutter.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-frida.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-gemini-client.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-ghidra-bridge-sources.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

verify-go-binary.mjs

refactor(verifiers): centralize named artifact output admission

2026-10-26 22:48:22 +08:00

verify-grok-client.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-http3-network-captures.mjs

fix(ci): repair verifier fixtures and formatting failures

2026-11-02 10:59:40 +08:00

verify-il2cpp-metadata.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-jeb.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-linux-setup-e2e.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-mcp-registry-metadata.mjs

feat(electron): add autonomous Electron runtime analysis (#464)

2026-08-05 19:07:46 +08:00

verify-module-boundaries.mjs

test: harden verification fixtures and runtime coverage

2026-10-14 08:59:27 +08:00

verify-native-agent-client.mjs

refactor(verification): centralize native client result discovery

2026-10-26 15:40:34 +08:00

verify-native-calls.mjs

fix(ci): validate artifact MCP replies against named schemas (#6021)

2026-10-21 23:28:12 +08:00

verify-native-ui.mjs

fix(native)!: preserve UI scalar facts and selection failures

2026-10-24 04:25:13 +08:00

verify-node-sea.mjs

feat(artifacts): inventory and extract Node.js single executable application blobs (#7000)

2026-10-25 02:10:41 +08:00

verify-omp-client.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-opencode-client.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-package-artifact.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-capabilities.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-discovery.d.mts

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-package-discovery.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-environment.d.mts

fix(test): use direct Node launcher on macOS

2026-07-24 03:31:26 +00:00

verify-package-environment.mjs

fix(setup)!: bind managed registrations to selected installation

2026-10-28 11:34:28 +00:00

verify-package-evidence.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-install.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-managed.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-mcp.mjs

feat(plugins): make Claude Code and Codex installs self-contained (#7514)

2026-10-27 17:13:17 +00:00

verify-package-pack.mjs

fix(plugins): align listing metadata with REA branding (#7711)

2026-10-28 05:16:41 +00:00

verify-package-platform.d.mts

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-package-platform.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-prompts.mjs

test(mcp): align completion checks with provider readiness

2026-10-12 18:44:02 +08:00

verify-package-setup-plan.d.mts

fix(ci): correlate ownership trace threads and preserve setup failures

2026-10-20 00:05:22 +08:00

verify-package-setup-plan.mjs

fix(ci): correlate ownership trace threads and preserve setup failures

2026-10-20 00:05:22 +08:00

verify-package-setup.d.mts

fix(verifiers): own setup terminal and snapshot lifetimes

2026-10-24 17:54:18 +08:00

verify-package-setup.mjs

fix(setup)!: bind managed registrations to selected installation

2026-10-28 11:34:28 +00:00

verify-package-unknown-provider.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-update.d.mts

fix(ci): preserve the package verifier HTTP boundary (#8483)

2026-11-01 18:36:21 +08:00

verify-package-update.mjs

fix(ci): preserve the package verifier HTTP boundary (#8483)

2026-11-01 18:36:21 +08:00

verify-package.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-packaged-ghidra-windows.mjs

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

verify-packaged-wasm-artifact.mjs

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-packed-bridge.d.mts

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-packed-bridge.mjs

feat(plugins): make Claude Code and Codex installs self-contained (#7514)

2026-10-27 17:13:17 +00:00

verify-packet-capture.mjs

fix(cli): preserve caller paths in format inspections (#7855)

2026-10-29 09:26:22 +08:00

verify-pcap.mjs

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

verify-pe-load-config.mjs

feat(pe): inspect TLS callbacks and load configuration (#7008)

2026-10-24 22:06:41 +08:00

verify-published-package.mjs

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

verify-qlog-captures.mjs

refactor(verifiers): consolidate capture result admission and parity

2026-10-26 23:12:34 +08:00

verify-qwen-client.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-real-browser.mjs

refactor(verification): own browser fixture lifecycle

2026-10-27 13:36:57 +08:00

verify-real-cutter.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-real-electron.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-real-ghidra-6502.mjs

fix(verifiers): consolidate Ghidra MCP result admission

2026-10-27 00:49:27 +08:00

verify-real-ghidra-address-context.mjs

fix(verifiers): consolidate Ghidra MCP result admission

2026-10-27 00:49:27 +08:00

verify-real-ghidra-assertions.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-real-ghidra-com.mjs

fix!: preserve address context input errors (#8419)

2026-11-02 00:52:27 +08:00

verify-real-ghidra-decompile-timeout.mjs

feat(mcp): support runtime analysis limit recovery (#7049)

2026-10-25 09:45:26 +08:00

verify-real-ghidra-decompiler-failure.mjs

feat(ghidra): bound one procedure's decompile without closing the session (#5662)

2026-10-24 07:42:50 +08:00

verify-real-ghidra-dol.mjs

refactor(native): consolidate provider-neutral analysis contracts

2026-10-27 06:43:53 +08:00

verify-real-ghidra-dos.mjs

fix(ghidra): retain relocation symbol observations (#8531)

2026-11-01 23:53:56 +08:00

verify-real-ghidra-function.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-real-ghidra-inventory.mjs

fix(ghidra): unify Unicode literal search semantics

2026-10-27 11:10:10 +08:00

verify-real-ghidra-m68k.mjs

fix(verifiers): consolidate Ghidra MCP result admission

2026-10-27 00:49:27 +08:00

verify-real-ghidra-mips-relocatable.mjs

refactor(native): consolidate provider-neutral analysis contracts

2026-10-27 06:43:53 +08:00

verify-real-ghidra-mips-shared.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-mips.mjs

test(ghidra): expect carved MIPS copies to be refused at target opening (#8227)

2026-10-31 15:24:17 +08:00

verify-real-ghidra-nativeaot.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-real-ghidra-noreturn.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-ppc.mjs

refactor(native): consolidate provider-neutral analysis contracts

2026-10-27 06:43:53 +08:00

verify-real-ghidra-raw.mjs

fix(verifiers): consolidate Ghidra MCP result admission

2026-10-27 00:49:27 +08:00

verify-real-ghidra-riscv.mjs

feat(ghidra): admit RISC-V ilp32 ELF with a derived calling convention (#8229)

2026-10-31 15:48:46 +08:00

verify-real-ghidra-swift.mjs

fix(ghidra): assemble the Swift verifier's unresolved-jump fixture before linking (#8325)

2026-10-31 09:01:06 -07:00

verify-real-ghidra-switch-assertions.mjs

fix(ghidra): recover evidenced switch cases and default targets (#579)

2026-10-05 22:54:17 +08:00

verify-real-ghidra-switch-controls.mjs

chore: migrate formatting to Oxfmt (#615)

2026-10-06 01:59:19 +08:00

verify-real-ghidra-switch.mjs

fix(verifiers): consolidate Ghidra MCP result admission

2026-10-27 00:49:27 +08:00

verify-real-ghidra-windows.mjs

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

verify-real-ghidra.mjs

fix(ghidra): retain relocation symbol observations (#8531)

2026-11-01 23:53:56 +08:00

verify-real-hopper-callers.mjs

fix(hopper): reconcile observed caller relationships (#7953)

2026-10-29 22:54:58 +08:00

verify-real-hopper-deadlines.mjs

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

verify-real-hopper-fat.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-real-hopper-linux.mjs

test(hopper): repair Linux demo setup and native verification (#2638)

2026-10-13 14:39:18 +08:00

verify-real-hopper.mjs

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

verify-real-ida.mjs

refactor(native): consolidate provider-neutral analysis contracts

2026-10-27 06:43:53 +08:00

verify-real-kuna.mjs

fix(native): report dispatch target applicability (#8400)

2026-11-01 21:17:55 +08:00

verify-reconstruction-readiness.mjs

fix(verifiers): preserve source Evidence through shared admission

2026-10-27 01:11:51 +08:00

verify-recorded-crash.mjs

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

verify-release-artifact.mjs

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

verify-release-checkpoint.mjs

fix(release): validate frozen checkpoint versions and breaking notes

2026-10-08 10:13:05 +00:00

verify-release-exposure.mjs

fix(audit): run the exposure verifier's commands under supervision

2026-11-02 02:44:58 -08:00

verify-repository-skill.mjs

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-signal-recording.mjs

refactor(verifiers): consolidate capture result admission and parity

2026-10-26 23:12:34 +08:00

verify-solidity-metadata.mjs

feat(evm): inspect lossless Solidity terminal CBOR metadata (#2790)

2026-10-13 21:55:30 +08:00

verify-test-discovery.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

verify-test-temp-hygiene.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-wasm-artifact.mjs

fix(cli): preserve caller paths in format inspections (#7855)

2026-10-29 09:26:22 +08:00

verify-wasm-interface-comparison.mjs

fix(verifiers): preserve source Evidence through shared admission

2026-10-27 01:11:51 +08:00

verify-web-network-captures.mjs

fix(captures): exclude normalized native numeric values (#7764)

2026-10-28 18:46:30 +08:00

verify-website.py

docs(readme): add Roman Urdu edition (#6499)

2026-10-23 16:06:27 +08:00

verify-windows-native-artifact.mjs

refactor(windows): share native artifact validation

2026-10-26 16:04:44 +08:00

verify-windows-native-inspection.mjs

fix(verification): keep runtime packaging and boundary fixtures complete

2026-10-26 16:46:53 +08:00

verify-windows-native.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-windows-package.mjs

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

website_i18n.py

docs(readme): add Roman Urdu edition (#6499)

2026-10-23 16:06:27 +08:00

website.py

fix(website): improve layout and clarify homepage copy

2026-10-26 01:33:31 +08:00

windows-capabilities.mjs

refactor(tooling): move verifier host helpers out of runtime

2026-10-26 14:46:23 +08:00