Edgar ArakelyanandClaude Opus 5.5 059322048f fix(browser): bound a saved response's decoded size and count only the spellings a secret save adds ...

- A UI step reads a saved response only once its decoded size is bounded
  before reading: the bytes received, or the declared length of one
  served from cache, times DEFLATE's 1,032 maximum expansion for gzip or
  deflate, must stay within 12,000,000 bytes. Another content coding
  (br, zstd) or an unknown size fails the step without reading.
- The saved-value cap counts the redaction spellings a secret save
  actually adds, its trimmed spelling included and an already held one
  not again, so re-saving the same secret does not grow the total.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-26 11:15:06 -07:00

..

.vitepress

docs(environments): explain building RL environments with REA

2026-10-26 00:16:52 +08:00

assets

docs(readme): show a dark showcase image on dark themes (#6915)

2026-10-24 05:51:22 +08:00

design

feat(native): make function matching allowance configurable (#7159)

2026-10-26 02:22:32 +08:00

readme

docs(environments): lead with agent prompts

2026-10-26 00:40:56 +08:00

releases

chore(main): release rea-agents 6.8.0 (#5004)

2026-10-25 16:35:15 +08:00

specs

fix(browser): bound a saved response's decoded size and count only the spellings a secret save adds

2026-10-26 11:15:06 -07:00

verification

feat(mcp): support runtime analysis limit recovery (#7049)

2026-10-25 09:45:26 +08:00

adb-device-analysis.md

fix(adb): own numeric declaration validation and diagnostics

2026-10-24 06:34:33 +08:00

agent-environments-quickstart.md

docs(environments): explain building RL environments with REA

2026-10-26 00:16:52 +08:00

agent-environments.md

chore: merge main into recorder saved values

2026-10-26 08:06:06 -07:00

android-analysis.md

docs(settings): explain runtime design and provider recovery

2026-10-25 09:56:11 +08:00

apk-signature.md

fix(artifacts): retain completed acquisition facts through finalization

2026-10-24 23:51:20 +08:00

apktool-resource-analysis.md

fix(filesystem): distinguish admission and bound-target failures

2026-10-24 11:27:27 +08:00

apple-application-analysis.md

fix(apple): keep dyld candidates inside the analyzed root on Windows (#6955)

2026-10-24 16:10:18 +08:00

apple-ips.md

fix(apple): keep the documented terminating process, parent pid and metadata members of IPS reports (#7079)

2026-10-25 13:56:51 +08:00

architecture.mermaid

docs: clarify ownership and cleanup review guidance

2026-10-25 06:51:31 +08:00

binary-diagnostics.md

feat(binary-layout): admit ELF32 i386, ARM and MIPS layout profiles (#7052)

2026-10-25 14:18:44 +08:00

browser-observation.md

fix(browser): admit JSON shape expansion against shared retention

2026-10-25 09:49:26 +08:00

browser-scenario-contract.md

fix(browser): bound a saved response's decoded size and count only the spellings a secret save adds

2026-10-26 11:15:06 -07:00

ci-analysis.md

docs(ci): add a repeatable static analysis example (#6496)

2026-10-23 23:42:58 +09:00

cli.md

fix(mcp)!: require allowed hosts for non-loopback HTTP binds (#7172)

2026-10-26 22:55:10 +08:00

client-configuration.md

feat(mcp): scope advertised tools by family (#7228)

2026-10-26 19:50:12 +08:00

client-verification.md

fix(setup): register explicit MCP runtimes and preserve launcher identity

2026-10-26 02:33:31 +08:00

desktop-applications.md

docs(desktop): list all supported IL2CPP metadata versions

2026-10-24 00:11:41 +08:00

devicetree.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

docs(settings): explain runtime design and provider recovery

2026-10-25 09:56:11 +08:00

elf-notes.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

erlang-beam.md

test(erlang): cover lambdas names filter and chunks miss in BEAM views (#6973)

2026-10-24 17:39:57 +08:00

error-contract.schema.json

fix(deps): upgrade zod without narrowing timestamp inputs

2026-10-26 20:13:12 +08:00

evm-bytecode.md

fix(evm): preserve reply allowance failures and selected limits

2026-10-24 02:40:21 +08:00

firmware-analysis.md

feat(firmware): inspect flattened devicetree blobs (#7009)

2026-10-24 22:45:22 +08:00

flutter-analysis.md

fix(flutter): qualify unsupported unified snapshot profiles

2026-10-24 04:28:54 +08:00

frida-instrumentation.md

fix!: retain Frida observations through shared finalization

2026-10-24 01:47:31 +08:00

ghidra-dol.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

ghidra-dos.md

fix(targets): keep original DOS header padding out of e_lfanew (#7013)

2026-10-25 01:54:20 +08:00

ghidra-mips.md

fix(ghidra): admit recordless MIPS-I legacy targets (#7014)

2026-10-25 01:16:51 +08:00

ghidra-nativeaot.md

fix(nativeaot): charge only examined candidate table entries

2026-10-24 04:23:56 +08:00

ghidra-ppc.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

ghidra-provider.md

fix(ghidra): scope rejected-input diagnostics to their request (#7140)

2026-10-25 22:37:32 +08:00

ghidra-psp.md

feat(ghidra): admit bounded PSP ELF through installed Allegrex (#1599)

2026-10-11 19:47:33 +08:00

ghidra-riscv.md

feat(ghidra): support raw NMOS 6502 analysis (#2079)

2026-10-13 21:13:01 +08:00

go-binaries.md

merge: consolidate upstream ownership and coverage fixes

2026-10-24 04:43:33 +08:00

godot-pck.md

fix(artifacts): retain raw archive keys across entry projections

2026-10-25 03:30:22 +08:00

gpu-code-objects.md

fix(gpu): derive legacy bundle extents from codec framing

2026-10-24 02:35:21 +08:00

harmony-analysis.md

fix(harmony): retain path-only package and signing observations

2026-10-24 02:40:22 +08:00

http3-capture-lab.md

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

ida-provider.md

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

il2cpp-metadata.md

fix(il2cpp): link arm64 builds whose registrations were inlined (#6989)

2026-10-25 04:21:18 +08:00

index.md

feat(elf): inspect Linux kernel module metadata (#7010)

2026-10-24 22:35:20 +08:00

installation.md

feat(ghidra): reuse existing projects through verified copies (#7236)

2026-10-26 22:31:13 +08:00

javascript-application-graph.md

fix(javascript): separate endpoint syntax correspondence from target identity

2026-10-24 03:59:44 +08:00

javascript-application-workflows.md

fix(javascript): bound loop capture and rest-copy expansion

2026-10-24 19:36:20 +08:00

javascript-artifact-reconstruction.md

fix(javascript): bind defaulted and destructured Webpack factory roles (#7117)

2026-10-25 05:23:23 -07:00

javascript-recovery.md

fix(javascript): preserve recovery acquisition and cancellation failures

2026-10-24 03:11:07 +08:00

javascript-route-inventory.md

fix(javascript): preserve route selection owners and uncertainty

2026-10-24 04:25:13 +08:00

javascript-runtime-observation.md

fix(inspector): retain captures through authorization cleanup failures

2026-10-24 03:16:30 +08:00

javascript-runtime-reconciliation.md

fix(browser): preserve unknown script ownership through reconciliation

2026-10-24 04:23:56 +08:00

jeb-analysis.md

fix(jeb): retain selected inputs and completed primary replies

2026-10-24 03:00:07 +08:00

kernel-modules.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

kuna-provider.md

fix(providers): preserve launch selections and refresh obsolete Kuna exports

2026-10-26 22:22:27 +08:00

managed-code-analysis.md

fix(managed): preserve malformed signature uncertainty in comparisons

2026-10-24 10:17:23 +08:00

mcp-contracts.md

fix(mcp)!: require allowed hosts for non-loopback HTTP binds (#7172)

2026-10-26 22:55:10 +08:00

mcp-prompts.md

feat(mcp): scope advertised tools by family (#7228)

2026-10-26 19:50:12 +08:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

model-artifacts.md

fix(model): preserve uncertainty across released GGUF layouts

2026-10-24 02:00:10 +08:00

native-function-matching.md

feat(native): make function matching allowance configurable (#7159)

2026-10-26 02:22:32 +08:00

native-investigation.md

fix(plist): own dictionary decoding across Apple workflows

2026-10-26 22:20:00 +08:00

node-sea.md

fix(artifacts): preserve opaque Node SEA asset keys

2026-10-25 02:54:17 +08:00

packet-captures.md

fix(captures): preserve canonical TShark alias fields

2026-10-23 19:07:46 +08:00

pcap-analysis.md

fix(pcap): preserve header snapshot limit with inferred lengths

2026-10-24 10:35:50 +08:00

pe-certificates.md

fix(pe): accept WIN_CERTIFICATE padding counted in dwLength (#6721)

2026-10-24 06:04:41 +08:00

pe-imports.md

fix(pe): share header identity across native metadata readers

2026-10-24 16:08:26 +08:00

pe-load-config.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

process-capture.md

fix(paths): preserve native traversal and unset PATH semantics

2026-10-26 14:17:27 +08:00

python-packaged-applications.md

fix(artifacts): retain raw archive keys across entry projections

2026-10-25 03:30:22 +08:00

python-pyc.md

feat(python): query selected pyc code-object facts (#6928)

2026-10-24 10:23:06 +08:00

raw-binary.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

reconstruction-coverage.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction): qualify original process evidence at its owner

2026-10-24 06:13:53 +08:00

reconstruction-readiness.md

refactor(verification): separate readiness evidence scopes

2026-10-24 11:31:39 +08:00

recorded-crashes.md

feat(apple): inspect IPS crash reports (#6511)

2026-10-24 16:02:59 +08:00

releasing.md

fix(release): reject missing manifest release boundaries

2026-10-25 17:25:18 +08:00

reverse-engineering-tools.md

docs(cutter): explain bridge descriptor discovery configuration

2026-10-24 17:21:08 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

signal-recordings.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

sqlite-databases.md

test(sqlite): preserve worker failures through cleanup retry

2026-10-24 12:34:10 +08:00

testing.md

feat(binary-layout): admit ELF32 i386, ARM and MIPS layout profiles (#7052)

2026-10-25 14:18:44 +08:00

tool-design.md

docs: clarify ownership and cleanup review guidance

2026-10-25 06:51:31 +08:00

user-visible-errors.csv

fix(windows): explain when Windows refuses to load the verified native addon (#6832)

2026-10-24 11:37:58 +08:00

wasm-artifacts.md

docs(settings): explain runtime design and provider recovery

2026-10-25 09:56:11 +08:00

web-network-captures.md

fix(environment): keep an update's word spelling of & and withhold later creates that omit derived fields

2026-10-26 09:32:00 -07:00

web-runtime.md

fix(browser): retain truthful cleanup facts and document request ownership

2026-10-24 03:59:44 +08:00

web-source-location.md

fix(browser): preserve completed source-map observations

2026-10-25 05:09:26 +08:00

website-module-trace.md

fix(analysis): preserve artifact and selection error ownership

2026-10-24 22:54:05 +08:00

website-script-export.md

docs: correct setup capture and recovery boundary guidance

2026-10-24 02:40:21 +08:00

windows-ghidra-p0.md

fix(windows): explain when Windows refuses to load the verified native addon (#6832)

2026-10-24 11:37:58 +08:00