Matt Van Horn 098173807c fix(audit): keep safe fuses unknown past a packaged native image ...

The fuse check counted sampled-out images as possibly unread but not native
images inside a package. A complete directory scan with a safe-fuse image on
disk, no ASAR hint, and an unopened packaged image reported the four Electron
checks as not_observed, although the Electron executable could be that image.

The fuse check, the Go and Rust checks, and the Electron rule-out each decided
this for themselves and had drifted apart. Move the decision to one domain
predicate, nativeImagesMayBeUnread, and use it in all three. A hinted
executable that was read still settles the check.

2026-11-01 19:07:41 -08:00

..

.vitepress

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

assets

docs(readme): show a dark showcase image on dark themes (#6915)

2026-10-24 05:51:22 +08:00

design

feat(artifacts): inspect and extract Bun standalone module graphs (#6998)

2026-10-29 22:31:50 +08:00

readme

docs(readme): align Linux x64 analysis prerequisites (#7997)

2026-10-29 13:44:07 +08:00

releases

docs: archive historical verification and release inventories (#7519)

2026-10-28 00:54:54 +08:00

specs

feat(environment): serve sorted creates, listed references and toggles (#7600)

2026-10-29 18:46:18 +08:00

verification

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

adb-device-analysis.md

fix(adb): validate screen capture PNG headers (#7962)

2026-10-29 16:04:49 +08:00

agent-environments-quickstart.md

fix(environment)!: report recorded reads and target uncertainty (#7834)

2026-10-29 05:09:31 +08:00

agent-environments.md

feat(environment): serve sorted creates, listed references and toggles (#7600)

2026-10-29 18:46:18 +08:00

android-analysis.md

feat(android): trace callers of external DEX methods (#8154)

2026-10-31 01:07:18 +08:00

apk-signature.md

docs(apk): clarify rotated signer agreement (#7936)

2026-10-29 20:00:02 +08:00

apktool-resource-analysis.md

fix(apktool): read Apktool 2.9+ metadata in its line-oriented dialect (#7747)

2026-10-28 19:46:11 +08:00

apple-application-analysis.md

fix(apple): read flattened framework Info.plist from Resources (#8101)

2026-10-30 01:00:06 -07:00

apple-ips.md

fix(apple): keep the documented terminating process, parent pid and metadata members of IPS reports (#7079)

2026-10-25 13:56:51 +08:00

architecture.mermaid

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

binary-diagnostics.md

feat(binary-layout): admit ELF32 i386, ARM and MIPS layout profiles (#7052)

2026-10-25 14:18:44 +08:00

browser-observation.md

fix(browser): preserve DOM length units in captures and comparisons (#7971)

2026-10-29 11:27:01 +08:00

browser-scenario-contract.md

fix(browser): disclose opaque redirect coverage gaps (#7943)

2026-10-29 07:57:00 +08:00

bun-standalone.md

feat(artifacts): inspect and extract Bun standalone module graphs (#6998)

2026-10-29 22:31:50 +08:00

capability-composition.md

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

ci-analysis.md

docs(ci): add a repeatable static analysis example (#6496)

2026-10-23 23:42:58 +09:00

cli.md

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

client-configuration.md

docs(setup): restore target and Hopper launch settings (#7902)

2026-10-29 23:03:02 +08:00

client-verification.md

fix(setup): register explicit MCP runtimes and preserve launcher identity

2026-10-26 02:33:31 +08:00

desktop-applications.md

fix(desktop): charge retained rows at their measured representation (#8105)

2026-10-30 01:00:28 -07:00

devicetree.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

dotnet-bundles.md

feat(artifacts): inspect and extract .NET single-file bundles (#3787)

2026-10-29 20:06:58 +08:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

fix(browser): preserve DOM length units in captures and comparisons (#7971)

2026-10-29 11:27:01 +08:00

elf-notes.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

erlang-beam.md

test(erlang): cover lambdas names filter and chunks miss in BEAM views (#6973)

2026-10-24 17:39:57 +08:00

error-contract.schema.json

fix(mcp): name the close_binary retry for retained cleanup (#8329)

2026-10-31 11:12:30 -07:00

esp-flash-image.md

feat(artifacts): inventory and extract ESP flash layouts (#8228)

2026-10-31 15:24:32 +08:00

esp-image.md

feat(artifacts): inventory and extract ESP flash layouts (#8228)

2026-10-31 15:24:32 +08:00

evm-bytecode.md

fix(analysis-view): keep inferred confidence on views of inferred Evidence (#8099)

2026-10-30 00:59:53 -07:00

firmware-analysis.md

feat(artifacts): inventory and extract UF2 and DfuSe firmware containers (#8230)

2026-10-31 16:27:00 +08:00

fit-images.md

feat(artifacts): inventory and extract U-Boot FIT images (#7771)

2026-10-29 13:33:26 +08:00

flutter-analysis.md

fix(flutter): qualify unsupported unified snapshot profiles

2026-10-24 04:28:54 +08:00

frida-instrumentation.md

fix!: retain Frida observations through shared finalization

2026-10-24 01:47:31 +08:00

ghidra-dol.md

docs(ghidra): fix DOL guide PowerPC link (#7857)

2026-10-29 04:57:59 +08:00

ghidra-dos.md

fix(ghidra): admit newer 12.x releases as compatible builds (#6924)

2026-10-27 03:49:12 +08:00

ghidra-mips.md

test(ghidra): expect carved MIPS copies to be refused at target opening (#8227)

2026-10-31 15:24:17 +08:00

ghidra-nativeaot.md

fix(nativeaot): charge only examined candidate table entries

2026-10-24 04:23:56 +08:00

ghidra-ppc.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

ghidra-provider.md

fix(ghidra): report unbacked file-offset addresses without schema repair (#8308)

2026-10-31 08:59:00 -07:00

ghidra-psp.md

test(ghidra): expect carved MIPS copies to be refused at target opening (#8227)

2026-10-31 15:24:17 +08:00

ghidra-riscv.md

feat(ghidra): admit RISC-V ilp32 ELF with a derived calling convention (#8229)

2026-10-31 15:48:46 +08:00

go-binaries.md

merge: consolidate upstream ownership and coverage fixes

2026-10-24 04:43:33 +08:00

godot-pck.md

feat(artifacts): read Godot 3 PCK version 1 archives (#7781)

2026-10-28 19:43:43 +08:00

gpu-code-objects.md

fix(gpu): derive legacy bundle extents from codec framing

2026-10-24 02:35:21 +08:00

harmony-analysis.md

fix(harmony): classify exact manifest names once (#7206)

2026-10-27 13:30:24 +08:00

hex-records.md

feat(artifacts): inventory and extract Intel HEX and Motorola S-record regions (#7136)

2026-10-28 12:35:55 +08:00

http3-capture-lab.md

fix(deps): patch fast-uri, qs and HTTP/3 certifi (#7704)

2026-10-28 03:34:36 +00:00

ida-provider.md

fix(ida): admit architecture families by allowlist (#7485)

2026-10-30 22:30:23 +08:00

il2cpp-metadata.md

fix(il2cpp): validate structural record extents (#7861)

2026-10-29 01:55:47 +08:00

index.md

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

ines-containers.md

feat(artifacts): inspect classic iNES container regions (#2816)

2026-10-31 15:49:16 +08:00

installation.md

feat(investigation)!: retain records across engine cleanup (#8361)

2026-10-31 21:34:45 +00:00

javascript-application-graph.md

fix(javascript): separate endpoint syntax correspondence from target identity

2026-10-24 03:59:44 +08:00

javascript-application-workflows.md

refactor(evidence): unify retained inputs across domains (#8299)

2026-10-31 14:45:21 +00:00

javascript-artifact-reconstruction.md

fix(electron): keep literal IPC sends ambiguous beside unresolved handlers (#8120)

2026-10-30 02:21:23 -07:00

javascript-recovery.md

fix(javascript): preserve recovery acquisition and cancellation failures

2026-10-24 03:11:07 +08:00

javascript-route-inventory.md

feat(web): page retained bundle endpoint observations and inferences (#7259)

2026-10-27 01:37:39 +08:00

javascript-runtime-observation.md

fix(inspector): retain captures through authorization cleanup failures

2026-10-24 03:16:30 +08:00

javascript-runtime-reconciliation.md

fix(javascript): distinguish bundled script locations (#7909)

2026-10-29 07:56:06 +08:00

jeb-analysis.md

fix(jeb)!: preserve engine refusal diagnostics

2026-10-27 06:22:10 +08:00

kernel-modules.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

kuna-provider.md

fix(kuna): omit Mach-O data symbols from the procedure inventory (#8335)

2026-10-31 11:12:41 -07:00

managed-code-analysis.md

feat(dotnet): expose field constant defaults (#8015)

2026-10-31 00:10:36 +08:00

mcp-contracts.md

fix!: preserve feature traces when owner lookup is unavailable (#8368)

2026-11-01 05:38:40 +08:00

mcp-prompts.md

feat(guidance): distinguish focused matches from broad parent sections (#8305)

2026-10-31 11:11:05 -07:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

model-artifacts.md

fix(model): preserve uncertainty across released GGUF layouts

2026-10-24 02:00:10 +08:00

native-function-matching.md

feat(native): make function matching allowance configurable (#7159)

2026-10-26 02:22:32 +08:00

native-investigation.md

fix(decompile): keep provider no-pseudocode facts on batch items (#8323)

2026-10-31 09:00:48 -07:00

node-sea.md

fix(artifacts): compare Node SEA member declarations

2026-10-27 06:06:27 +08:00

packet-captures.md

fix(captures): preserve canonical TShark alias fields

2026-10-23 19:07:46 +08:00

pcap-analysis.md

fix(pcap): redact HTTP credentials in failed capture diagnostics (#7871)

2026-10-28 18:14:22 +00:00

pe-certificates.md

fix(certificates)!: disclose undecoded unsigned attributes (#7920)

2026-10-29 08:56:07 +08:00

pe-imports.md

fix(pe): share header identity across native metadata readers

2026-10-24 16:08:26 +08:00

pe-load-config.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

process-capture.md

perf(process): reuse a verified Darwin ownership helper across processes (#8318)

2026-10-31 11:12:02 -07:00

python-packaged-applications.md

fix(artifacts): retain raw archive keys across entry projections

2026-10-25 03:30:22 +08:00

python-pyc.md

feat(python): query selected pyc code-object facts (#6928)

2026-10-24 10:23:06 +08:00

raw-binary.md

docs: correct the raw ARM example and document a Cortex-M language override (#7483)

2026-10-30 22:28:06 +08:00

reconstruction-coverage.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction): qualify original process evidence at its owner

2026-10-24 06:13:53 +08:00

reconstruction-readiness.md

refactor(verification): separate readiness evidence scopes

2026-10-24 11:31:39 +08:00

recorded-crashes.md

feat(apple): inspect IPS crash reports (#6511)

2026-10-24 16:02:59 +08:00

release-exposure.md

fix(audit): keep safe fuses unknown past a packaged native image

2026-11-01 19:07:41 -08:00

releasing.md

feat(plugins): make Claude Code and Codex installs self-contained (#7514)

2026-10-27 17:13:17 +00:00

reverse-engineering-tools.md

docs(cutter): explain bridge descriptor discovery configuration

2026-10-24 17:21:08 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

signal-recordings.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

sqlite-databases.md

test(sqlite): preserve worker failures through cleanup retry

2026-10-24 12:34:10 +08:00

testing.md

feat(investigation)!: retain records across engine cleanup (#8361)

2026-10-31 21:34:45 +00:00

tool-design.md

feat(investigation)!: retain records across engine cleanup (#8361)

2026-10-31 21:34:45 +00:00

uf2-dfuse.md

feat(artifacts): inventory and extract UF2 and DfuSe firmware containers (#8230)

2026-10-31 16:27:00 +08:00

uimage.md

fix(artifacts): name every U-Boot uImage type in the pinned image.h (#8007)

2026-10-29 15:13:37 +08:00

unityfs.md

feat(artifacts): read UnityFS AssetBundle containers (#7699)

2026-10-28 16:47:39 +08:00

user-visible-errors.csv

feat(investigation)!: retain records across engine cleanup (#8361)

2026-10-31 21:34:45 +00:00

wasm-artifacts.md

refactor(evidence): unify retained inputs across domains (#8299)

2026-10-31 14:45:21 +00:00

web-network-captures.md

fix(captures): admit browser-serialized HAR request URLs (#8112)

2026-10-30 01:03:35 -07:00

web-runtime.md

fix(browser): retain truthful cleanup facts and document request ownership

2026-10-24 03:59:44 +08:00

web-source-location.md

fix(source-maps): resolve empty sourceRoot sources against the map URL (#8107)

2026-10-30 01:00:41 -07:00

website-module-trace.md

fix(analysis): preserve artifact and selection error ownership

2026-10-24 22:54:05 +08:00

website-script-export.md

docs: correct setup capture and recovery boundary guidance

2026-10-24 02:40:21 +08:00

windows-ghidra-p0.md

fix: correct stale provider refusal and diagnostic text (#7484)

2026-10-30 22:39:46 +08:00