Edgar ArakelyanandClaude Opus 5.5 178668fc74 fix(environment): readable bundle inputs, an honest replay check and admitted export reads ...

- The Dockerfile copies manifest.json and evidence.json owned by the node
  user, so a private host umask cannot leave the runtime user unable to
  read them.
- The generated verifier keeps the first record's own unknown status
  instead of borrowing another record's, and an error reply never passes
  the check, even when the recorded status is unknown.
- Export checks, before reading an input, that reading and natively
  parsing the whole file fits live heap headroom, with the same rule the
  bounded JSON reader applies to native parsing, and refuses it as a
  resource constraint otherwise.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-18 20:52:25 -07:00

..

.vitepress

feat(environment): serve an environment manifest as a replay environment

2026-10-18 19:43:09 -07:00

assets

docs: keep license sections text-only

2026-10-10 00:09:46 +08:00

readme

fix(ci): handle cache eviction and composed cleanup assertions (#4824)

2026-10-18 01:08:14 +08:00

releases

chore(release/6.7.0): release rea-agents 6.7.0 (#4983)

2026-10-18 15:40:45 +08:00

specs

chore: merge environment serve (d8d53713) into environment export

2026-10-18 20:39:57 -07:00

verification

fix(electron): delegate once dispatch to the active runtime (#4605)

2026-10-17 06:38:13 +08:00

adb-device-analysis.md

fix(adb): preserve display-scoped window focus declarations

2026-10-17 13:40:09 +08:00

agent-environments.md

fix(environment): readable bundle inputs, an honest replay check and admitted export reads

2026-10-18 20:52:25 -07:00

android-analysis.md

fix(tests): restore Android prerequisite verification

2026-10-18 12:46:25 +00:00

apktool-resource-analysis.md

fix(apktool)!: select numeric regions using Android b+ qualifiers

2026-10-19 03:25:25 +08:00

apple-application-analysis.md

fix(mobile): classify authenticated file occurrences as components

2026-10-17 19:58:18 +08:00

architecture.mermaid

feat(mcp): serve the MCP server over streamable HTTP

2026-10-17 21:05:10 -07:00

binary-diagnostics.md

fix(ghidra): retain scoped failures through process finalization

2026-10-16 07:25:23 +08:00

browser-observation.md

fix(browser): parse complete COOP and COEP structured items

2026-10-17 13:26:13 +08:00

browser-scenario-contract.md

docs(browser): clarify scenario cleanup after termination

2026-10-17 13:49:20 +08:00

cli.md

feat(environment): serve an environment manifest as a replay environment

2026-10-18 19:43:09 -07:00

client-configuration.md

fix(setup): preserve configuration identity and inspection uncertainty

2026-10-17 00:44:02 +08:00

client-verification.md

fix(contracts): preserve array guidance across MCP schema profiles

2026-10-15 01:41:31 +08:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

fix(browser): share DOM snapshot admission

2026-10-17 15:59:57 +08:00

error-contract.schema.json

feat(evm): inspect offline bytecode interfaces through EVMole (#1051)

2026-10-08 15:32:05 +08:00

evm-bytecode.md

feat(evm): inspect lossless Solidity terminal CBOR metadata (#2790)

2026-10-13 21:55:30 +08:00

firmware-analysis.md

fix(firmware): preserve snapshot input failures and descriptor ownership

2026-10-17 08:53:56 +08:00

flutter-analysis.md

fix(flutter): reject ambiguous ELF mappings and bound note reads (#2334)

2026-10-13 22:13:22 +08:00

frida-instrumentation.md

fix(frida): drain admitted operations and honor queued cancellation (#2305)

2026-10-14 02:56:00 +08:00

ghidra-dos.md

fix(ghidra): compare final DOS relocation windows

2026-10-17 19:30:11 +08:00

ghidra-mips.md

fix(ghidra): reconcile GNU MIPS ABI declarations

2026-10-14 14:47:26 +08:00

ghidra-nativeaot.md

fix(ghidra): use resolved type addresses for NativeAOT metadata

2026-10-15 21:05:33 +08:00

ghidra-ppc.md

feat(ghidra): admit 32-bit big-endian PowerPC ELF (#1747)

2026-10-14 06:35:55 +08:00

ghidra-provider.md

perf(ghidra): aggregate binary overview at the provider boundary (#4754)

2026-10-17 10:44:24 +00:00

ghidra-psp.md

feat(ghidra): admit bounded PSP ELF through installed Allegrex (#1599)

2026-10-11 19:47:33 +08:00

ghidra-riscv.md

feat(ghidra): support raw NMOS 6502 analysis (#2079)

2026-10-13 21:13:01 +08:00

go-binaries.md

fix(artifacts): preserve input size refusals and recovery

2026-10-17 08:45:15 +08:00

harmony-analysis.md

fix(mobile): derive runtime hints from classified components

2026-10-17 20:02:26 +08:00

http3-capture-lab.md

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

ida-provider.md

fix(ida): refuse universal Mach-O targets in attached profiles (#4765)

2026-10-17 04:27:46 -07:00

index.md

feat(environment): serve an environment manifest as a replay environment

2026-10-18 19:43:09 -07:00

installation.md

fix(uninstall): preflight repeated registration ownership

2026-10-19 06:32:14 +08:00

javascript-application-graph.md

fix(javascript): retain unresolved network targets with provenance

2026-10-16 08:14:52 +08:00

javascript-application-workflows.md

fix(javascript): preserve unresolved version relationships

2026-10-17 12:51:04 +08:00

javascript-artifact-reconstruction.md

fix(javascript): bound semantic unknown retention at projection

2026-10-17 21:57:31 +08:00

javascript-recovery.md

fix(javascript): report oversized recovery inputs as file-size limits (#4757)

2026-10-17 04:26:39 -07:00

javascript-runtime-observation.md

fix(javascript): report malformed runtime context events as excluded (#4755)

2026-10-17 04:26:25 -07:00

javascript-runtime-reconciliation.md

fix(javascript): preserve mapped runtime digest disagreements

2026-10-15 17:04:49 +08:00

jeb-analysis.md

docs(jeb): qualify Linux CE native workflows (#5002)

2026-10-18 17:13:04 +08:00

kuna-provider.md

fix(kuna): name the setting that owns a timed-out Kuna run (#4343)

2026-10-17 00:38:16 -07:00

managed-code-analysis.md

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00

mcp-contracts.md

chore: merge main (a80575c7) into the streamable HTTP branch

2026-10-18 16:21:53 -07:00

mcp-prompts.md

docs(mcp): describe the 100-value completion reply limit (#4086)

2026-10-15 05:20:50 -07:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

native-investigation.md

fix(native): preserve partial call reference evidence

2026-10-19 07:12:44 +08:00

packet-captures.md

test(perf): evaluate larger and non-HTTP packet workflows (#3232)

2026-10-14 16:18:22 +08:00

pcap-analysis.md

fix(pcap): preserve exact UTC capture instants

2026-10-18 07:40:25 +08:00

process-capture.md

fix(process): preserve unrelated trace comparison uncertainty (#4178)

2026-10-16 00:56:55 +08:00

raw-binary.md

feat(ghidra): support raw big-endian m68k analysis (#4018)

2026-10-16 23:57:34 +08:00

reconstruction-coverage.md

fix(reconstruction): require comparable cited Evidence for coverage

2026-10-15 18:39:57 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction): require comparable cited Evidence for coverage

2026-10-15 18:39:57 +08:00

reconstruction-readiness.md

docs(readiness): align required stage identifier and checks with evaluator (#2200)

2026-10-13 00:15:54 +08:00

recorded-crashes.md

fix(pwndbg): reject core mapping paths that escape sysroot

2026-10-18 10:27:37 +08:00

releasing.md

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

reverse-engineering-tools.md

fix(cutter): normalize command checkpoint cancellation

2026-10-17 09:24:43 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

fix(rust): retain compatible cargo-auditable revisions

2026-10-14 14:47:26 +08:00

signal-recordings.md

feat(signals): discover installed decoders and option help (#2487)

2026-10-13 15:58:19 +09:00

sqlite-databases.md

fix(sqlite): preserve column identity before row selection

2026-10-17 15:33:59 +08:00

testing.md

fix(environment): retry the bundle run once on public ECR's anonymous pull quota

2026-10-18 19:43:09 -07:00

tool-design.md

fix(process): retain diagnostics through bounded output finalization

2026-10-18 01:03:19 +08:00

user-visible-errors.csv

fix(uninstall): preserve the configuration as it was before uninstall edits it

2026-10-17 04:57:06 +08:00

wasm-artifacts.md

fix(artifacts): preserve input size refusals and recovery

2026-10-17 08:45:15 +08:00

web-network-captures.md

feat(analysis-view): project an environment manifest from web network captures (#4954)

2026-10-19 07:07:37 +08:00

web-runtime.md

fix(browser): treat module-import initiator positions as script positions

2026-10-08 16:44:25 +00:00

web-source-location.md

fix(bun): report the real runtime and enforce worker memory budgets on Windows (#1730)

2026-10-11 19:20:00 +08:00

website-module-trace.md

feat(browser): trace captured website module imports (#879)

2026-10-07 14:59:52 +08:00

website-script-export.md

fix(browser): preserve body API provenance through script export

2026-10-12 14:12:19 +08:00

windows-ghidra-p0.md

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00