Dragolone 1f8084c7db fix(node-sea): bound ELF note scans by the notes a carrier holds (#8031) ...

Artifact classification probes every ELF root for a Node SEA note. Each
PT_NOTE program header was scanned on its own, one read per note, so
headers that declare the same note bytes multiplied the work: a 295 KB
ELF with 4,096 such headers kept inspect-artifact busy for about three
and a half minutes.

Every note header takes at least 12 bytes, so disjoint tables hold at
most one note per 12 file bytes. The scan now stops there. Past that
count the remaining tables are unreadable: an ELF without a confirmed
blob keeps its native classification, and a confirmed blob fails closed.

2026-11-04 19:31:14 +08:00

..

.vitepress

feat(artifacts): inspect classic iNES container regions (#2816)

2026-10-31 15:49:16 +08:00

assets

docs(readme): show a dark showcase image on dark themes (#6915)

2026-10-24 05:51:22 +08:00

design

docs(limits): say setup forwards the selected MCP response budget (#8342)

2026-11-04 19:03:56 +08:00

readme

docs(readme): move Discord button below site links

2026-11-03 16:56:44 +08:00

releases

docs: archive historical verification and release inventories (#7519)

2026-10-28 00:54:54 +08:00

specs

fix(environment): disclose truncated comparison differences (#7673)

2026-11-03 14:48:54 +08:00

verification

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

adb-device-analysis.md

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

agent-environments-quickstart.md

fix(environment)!: report recorded reads and target uncertainty (#7834)

2026-10-29 05:09:31 +08:00

agent-environments.md

fix(environment): disclose truncated comparison differences (#7673)

2026-11-03 14:48:54 +08:00

android-analysis.md

fix(android): ignore action-less filters in activity export defaults (#8030)

2026-11-04 19:28:59 +08:00

apk-signature.md

docs(apk): clarify rotated signer agreement (#7936)

2026-10-29 20:00:02 +08:00

apktool-resource-analysis.md

fix(apktool): read Apktool 2.9+ metadata in its line-oriented dialect (#7747)

2026-10-28 19:46:11 +08:00

apple-application-analysis.md

fix(apple): read flattened framework Info.plist from Resources (#8101)

2026-10-30 01:00:06 -07:00

apple-ips.md

fix(apple): keep the documented terminating process, parent pid and metadata members of IPS reports (#7079)

2026-10-25 13:56:51 +08:00

architecture.mermaid

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

binary-diagnostics.md

feat(binary-layout): admit ELF64 AArch64 and name the refused host (#8711)

2026-11-03 09:37:41 +08:00

browser-observation.md

fix(browser): keep negative script columns Chrome reports (#8684)

2026-11-03 14:50:00 +08:00

browser-scenario-contract.md

fix(browser): disclose opaque redirect coverage gaps (#7943)

2026-10-29 07:57:00 +08:00

bun-standalone.md

feat(artifacts): inspect and extract Bun standalone module graphs (#6998)

2026-10-29 22:31:50 +08:00

capability-composition.md

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

ci-analysis.md

docs(ci): add a repeatable static analysis example (#6496)

2026-10-23 23:42:58 +09:00

cli.md

fix(cli): guide delimited analysis view exports (#8730)

2026-11-04 19:10:35 +08:00

client-configuration.md

docs(setup): describe FreeBuff as published setup support (#7246)

2026-11-04 19:22:36 +08:00

client-verification.md

fix(setup): register explicit MCP runtimes and preserve launcher identity

2026-10-26 02:33:31 +08:00

desktop-applications.md

fix(desktop): charge retained rows at their measured representation (#8105)

2026-10-30 01:00:28 -07:00

devicetree.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

dotnet-bundles.md

feat(artifacts): inspect and extract .NET single-file bundles (#3787)

2026-10-29 20:06:58 +08:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

fix(electron): preserve runtime rejection and exception policies (#8542)

2026-11-02 01:15:08 +08:00

elf-notes.md

feat(elf): decode Linux core dump process and memory mapping notes (#8830)

2026-11-04 11:46:11 +08:00

erlang-beam.md

test(erlang): cover lambdas names filter and chunks miss in BEAM views (#6973)

2026-10-24 17:39:57 +08:00

error-contract.schema.json

fix(mcp): name the close_binary retry for retained cleanup (#8329)

2026-10-31 11:12:30 -07:00

esp-flash-image.md

feat(artifacts): inventory and extract ESP flash layouts (#8228)

2026-10-31 15:24:32 +08:00

esp-image.md

feat(artifacts): inventory and extract ESP flash layouts (#8228)

2026-10-31 15:24:32 +08:00

evm-bytecode.md

fix(evm): explain limiter configuration and access failures (#8669)

2026-11-03 09:38:01 +08:00

firmware-analysis.md

fix(firmware): recommend the operation-specific engine (#8668)

2026-11-03 09:17:33 +08:00

fit-images.md

feat(artifacts): inventory and extract U-Boot FIT images (#7771)

2026-10-29 13:33:26 +08:00

flutter-analysis.md

fix(flutter): read unlabeled Dart Version::String() from engines (#7232)

2026-11-03 14:48:21 +08:00

frida-instrumentation.md

fix!: retain Frida observations through shared finalization

2026-10-24 01:47:31 +08:00

ghidra-dol.md

docs(ghidra): fix DOL guide PowerPC link (#7857)

2026-10-29 04:57:59 +08:00

ghidra-dos.md

fix(ghidra): admit newer 12.x releases as compatible builds (#6924)

2026-10-27 03:49:12 +08:00

ghidra-mips.md

test(ghidra): expect carved MIPS copies to be refused at target opening (#8227)

2026-10-31 15:24:17 +08:00

ghidra-nativeaot.md

fix(nativeaot): charge only examined candidate table entries

2026-10-24 04:23:56 +08:00

ghidra-ppc.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

ghidra-provider.md

fix(ghidra): retain relocation symbol observations (#8531)

2026-11-01 23:53:56 +08:00

ghidra-psp.md

test(ghidra): expect carved MIPS copies to be refused at target opening (#8227)

2026-10-31 15:24:17 +08:00

ghidra-riscv.md

feat(ghidra): admit RISC-V ilp32 ELF with a derived calling convention (#8229)

2026-10-31 15:48:46 +08:00

go-binaries.md

merge: consolidate upstream ownership and coverage fixes

2026-10-24 04:43:33 +08:00

godot-pck.md

feat(artifacts): read Godot 3 PCK version 1 archives (#7781)

2026-10-28 19:43:43 +08:00

gpu-code-objects.md

fix(gpu): derive legacy bundle extents from codec framing

2026-10-24 02:35:21 +08:00

harmony-analysis.md

fix(harmony): classify exact manifest names once (#7206)

2026-10-27 13:30:24 +08:00

hex-records.md

feat(artifacts): inventory and extract Intel HEX and Motorola S-record regions (#7136)

2026-10-28 12:35:55 +08:00

http3-capture-lab.md

fix(deps): patch fast-uri, qs and HTTP/3 certifi (#7704)

2026-10-28 03:34:36 +00:00

ida-provider.md

fix(discovery): carry provider repair instructions into capability discovery (#8532)

2026-11-01 08:57:11 -08:00

il2cpp-metadata.md

fix(il2cpp): validate structural record extents (#7861)

2026-10-29 01:55:47 +08:00

index.md

fix(docs): drop duplicate native-inspection guide row (#7480)

2026-11-03 14:45:03 +08:00

ines-containers.md

feat(artifacts): inspect classic iNES container regions (#2816)

2026-10-31 15:49:16 +08:00

installation.md

docs(installation): list every engine accepted by doctor --provider (#4767)

2026-11-04 19:02:32 +08:00

javascript-application-graph.md

fix(javascript): separate endpoint syntax correspondence from target identity

2026-10-24 03:59:44 +08:00

javascript-application-workflows.md

feat(javascript): page retained feature traces through analysis views (#8522)

2026-11-01 08:56:05 -08:00

javascript-artifact-reconstruction.md

fix(javascript): keep static facts after semantic results use the parent budget (#8648)

2026-11-02 05:16:16 -08:00

javascript-recovery.md

fix(javascript): preserve recovery acquisition and cancellation failures

2026-10-24 03:11:07 +08:00

javascript-route-inventory.md

feat(evidence): read selected complete records without the whole bundle (#8528)

2026-11-01 08:56:58 -08:00

javascript-runtime-observation.md

fix(inspector): retain captures through authorization cleanup failures

2026-10-24 03:16:30 +08:00

javascript-runtime-reconciliation.md

fix(javascript): reconcile Node targets with entry assets (#8670)

2026-11-03 08:54:39 +08:00

jeb-analysis.md

fix(jeb)!: preserve engine refusal diagnostics

2026-10-27 06:22:10 +08:00

kernel-modules.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

kuna-provider.md

feat(kuna): verify release 1.990 (#8813)

2026-11-04 11:49:36 +08:00

managed-code-analysis.md

feat(dotnet): expose field constant defaults (#8015)

2026-10-31 00:10:36 +08:00

mcp-contracts.md

fix(mcp): keep detail guidance in compact input schemas (#8034)

2026-11-04 19:14:52 +08:00

mcp-prompts.md

feat(guidance): distinguish focused matches from broad parent sections (#8305)

2026-10-31 11:11:05 -07:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

model-artifacts.md

fix(model): preserve uncertainty across released GGUF layouts

2026-10-24 02:00:10 +08:00

native-function-matching.md

feat(native): make function matching allowance configurable (#7159)

2026-10-26 02:22:32 +08:00

native-investigation.md

fix(native): preserve implementation file locations (#8667)

2026-11-03 09:38:12 +08:00

node-sea.md

fix(node-sea): bound ELF note scans by the notes a carrier holds (#8031)

2026-11-04 19:31:14 +08:00

packet-captures.md

fix(captures): preserve canonical TShark alias fields

2026-10-23 19:07:46 +08:00

pcap-analysis.md

fix(pcap): redact HTTP credentials in failed capture diagnostics (#7871)

2026-10-28 18:14:22 +00:00

pe-certificates.md

fix(certificates)!: disclose undecoded unsigned attributes (#7920)

2026-10-29 08:56:07 +08:00

pe-imports.md

fix(pe): share header identity across native metadata readers

2026-10-24 16:08:26 +08:00

pe-load-config.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

process-capture.md

perf(process): reuse a verified Darwin ownership helper across processes (#8318)

2026-10-31 11:12:02 -07:00

python-packaged-applications.md

fix(artifacts): retain raw archive keys across entry projections

2026-10-25 03:30:22 +08:00

python-pyc.md

feat(python): query selected pyc code-object facts (#6928)

2026-10-24 10:23:06 +08:00

raw-binary.md

docs: correct the raw ARM example and document a Cortex-M language override (#7483)

2026-10-30 22:28:06 +08:00

reconstruction-coverage.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction): qualify original process evidence at its owner

2026-10-24 06:13:53 +08:00

reconstruction-readiness.md

refactor(verification): separate readiness evidence scopes

2026-10-24 11:31:39 +08:00

recorded-crashes.md

feat(apple): inspect IPS crash reports (#6511)

2026-10-24 16:02:59 +08:00

releasing.md

feat(plugins): make Claude Code and Codex installs self-contained (#7514)

2026-10-27 17:13:17 +00:00

reverse-engineering-tools.md

fix(objdump)!: preserve unknown executable identity (#8824)

2026-11-04 02:01:44 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

signal-recordings.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

sqlite-databases.md

test(sqlite): preserve worker failures through cleanup retry

2026-10-24 12:34:10 +08:00

testing-lanes.md

feat(kuna): verify release 1.990 (#8813)

2026-11-04 11:49:36 +08:00

testing.md

fix(process): re-read unreadable tokens before signaling and name the process (#8553)

2026-11-02 00:21:23 -08:00

tool-design.md

docs(providers): verify prerequisite recovery and sibling failures

2026-11-01 21:14:27 +08:00

uf2-dfuse.md

feat(artifacts): inventory and extract UF2 and DfuSe firmware containers (#8230)

2026-10-31 16:27:00 +08:00

uimage.md

fix(artifacts): name every U-Boot uImage type in the pinned image.h (#8007)

2026-10-29 15:13:37 +08:00

unityfs.md

feat(artifacts): read UnityFS AssetBundle containers (#7699)

2026-10-28 16:47:39 +08:00

user-visible-errors.csv

fix(cli): describe one-shot timeouts for an invocation whose session has ended (#8535)

2026-11-01 08:57:32 -08:00

wasm-artifacts.md

feat(evidence): read selected complete records without the whole bundle (#8528)

2026-11-01 08:56:58 -08:00

web-network-captures.md

fix(har): accept Chrome DevTools bracketed IPv6 server addresses (#7225)

2026-11-03 14:46:10 +08:00

web-runtime.md

fix(browser): keep negative script columns Chrome reports (#8684)

2026-11-03 14:50:00 +08:00

web-source-location.md

fix(source-maps): resolve empty sourceRoot sources against the map URL (#8107)

2026-10-30 01:00:41 -07:00

website-module-trace.md

fix(analysis): preserve artifact and selection error ownership

2026-10-24 22:54:05 +08:00

website-script-export.md

docs: correct setup capture and recovery boundary guidance

2026-10-24 02:40:21 +08:00

windows-ghidra-p0.md

fix(discovery): carry provider repair instructions into capability discovery (#8532)

2026-11-01 08:57:11 -08:00