Matt Van Horn f183381739 feat(audit): report what a shipped app exposes to static analysis ...

Adds `audit_release_exposure` and `rea audit-release-exposure` to report
source maps, Electron fuse implications, extractable payloads, debug
information, build metadata, and credential markers. Checks carry stable
IDs, observations, statuses, and fixed remediation, while incomplete and
unassessed checks remain visible without implying a security verdict.
Credential findings include only rule IDs and locations. The CLI
supports `--fail_on` severity thresholds and exits 3 when an exposed
check meets the threshold.

2026-11-01 02:41:37 -08:00

..

adbStartMcp.test.ts

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

analysisViewAuthenticationFailures.test.ts

feat(artifacts): compare inventories from Evidence sources (#7869)

2026-10-29 03:12:03 +08:00

analysisViewFileCancellation.test.ts

refactor(analysis-view): unify request and source ownership

2026-10-23 07:57:14 +08:00

apkSignatureLifecycle.test.ts

feat: add FreeBuff agent support for REA setup (#2736)

2026-10-25 11:29:17 +08:00

apktoolEnvironment.test.ts

fix(config): preserve captured environments across provider launches

2026-10-26 17:39:23 +08:00

artifactFileSourceLifecycle.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

artifactReadFailurePrecedence.test.ts

fix(artifacts): retain descriptor ownership and read completion facts

2026-10-17 00:44:02 +08:00

asarSnapshotOperation.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

assetCatalogCancellationReason.test.ts

fix(apple): preserve asset catalog caller cancellation reason (#6055)

2026-10-22 02:51:11 +08:00

binaryDiagnosticsCliCleanup.test.ts

fix(errors): restore typed primary after confirmed cleanup

2026-10-17 09:04:09 +08:00

binaryTargetAdmissionCancellation.test.ts

refactor(filesystem): preserve admitted file facts

2026-10-25 04:09:11 +08:00

browserScenarioCleanup.test.ts

fix(ci): align static checks and regression fixtures with current contracts (#7349)

2026-10-27 21:24:30 +08:00

bundleComparisonFailures.test.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

cleanLinuxHopperRuntime.test.ts

fix(tests): stabilize process fixtures and malformed input coverage (#6570)

2026-10-23 10:39:28 +00:00

cliJsonInputStatus.test.ts

test(cli): reduce repeated startup and filesystem setup

2026-10-08 04:03:24 +08:00

cliLogging.test.ts

refactor(logging): unify startup policy and test ownership

2026-10-23 15:21:14 +08:00

cliSelectedEnvironment.test.ts

fix(process): preserve environment snapshots and final cancellation

2026-10-26 17:26:16 +08:00

cliUpdateAlias.test.ts

fix(cli): route update flag through verified updater

2026-10-18 05:33:21 +08:00

commandFinalizationCancellation.test.ts

fix(hermes): preserve external YAML anchor consumers (#5152)

2026-10-27 21:33:17 +08:00

configurationWriteDiagnostics.test.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

curatedWindowsLane.test.ts

fix(windows): restore native verification fixture coverage (#7479)

2026-10-27 18:50:40 +08:00

cutterDescriptorLifetime.test.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

darwinCompilerCleanup.test.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

darwinHelperCacheCleanup.test.ts

perf(process): reuse a verified Darwin ownership helper across processes (#8318)

2026-10-31 11:12:02 -07:00

derivedOperationFailures.test.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

directAnalysisStatFailure.test.ts

refactor(cli): retain typed analysis outcomes through delivery

2026-10-27 09:16:02 +08:00

dmgCancellationReason.test.ts

fix(artifacts): preserve exact ZIP and DMG caller cancellation reasons

2026-10-24 03:11:07 +08:00

dylibDirectoryLifecycle.test.ts

fix(artifacts): retain dylib enumeration readers through failed cleanup

2026-10-24 03:00:09 +08:00

dylibFileLifetime.test.ts

fix(artifacts): retain original I/O failure evidence

2026-10-24 12:21:44 +08:00

electronFuseCleanup.test.ts

fix(electron): own fuse cleanup through adapters and shutdown

2026-10-17 21:24:00 +08:00

environmentBuildHeadroom.test.ts

feat(environment): build agent environments from a prompt (#6946)

2026-10-24 21:51:41 +08:00

environmentBundleMemory.test.ts

feat(environment): build agent environments from a prompt (#6946)

2026-10-24 21:51:41 +08:00

environmentExportMemory.test.ts

fix(environment)!: attribute source errors to caller fields (#7900)

2026-10-29 08:12:09 +08:00

environmentFinalizationCli.test.ts

test(environment): read asynchronous owner observations through contracts

2026-10-24 04:16:47 +08:00

evidenceBundleHeadroom.test.ts

feat(javascript): link assignment right-hand sides to their writes (#6206)

2026-10-24 10:04:38 +08:00

filesystemSnapshotFallbackCancellation.test.ts

refactor(process): remove the redundant scenario parsing alias

2026-10-24 09:57:15 +08:00

filesystemSnapshotRaces.test.ts

fix(async): own completion across test and provider boundaries

2026-10-25 08:29:20 +08:00

firmwareFileLifetime.test.ts

fix(paths): preserve selected command, output, and source identities

2026-10-26 17:14:02 +08:00

firmwarePublicationDeadline.test.ts

refactor(cli): retain typed analysis outcomes through delivery

2026-10-27 09:16:02 +08:00

fridaFinalizationCli.test.ts

style: format integrated boundary fixes

2026-10-24 01:58:35 +08:00

ghidraEndpointLifetime.test.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

ghidraImportSnapshotLifetime.test.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

ghidraLaunchRollback.test.ts

fix(ghidra): preserve launch outcomes through cancellation and rollback

2026-10-17 12:27:08 +08:00

ghidraProjectReadCancellation.test.ts

feat(ghidra): reuse existing projects through verified copies (#7236)

2026-10-26 22:31:13 +08:00

ghidraWindowsCleanupAuthority.test.ts

fix(ghidra): require Windows cleanup ownership

2026-10-27 11:49:23 +08:00

gpuFileLifetime.test.ts

feat(gpu): inspect static CUDA and HIP code objects (#5813)

2026-10-21 19:06:44 +08:00

historicalCaptureSnapshotRedaction.test.ts

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

historicalCaptureSourceSnapshots.test.ts

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

hopperDownloadHttpFailure.test.ts

fix(setup): preserve Linux Hopper HTTP failure status (#7183)

2026-10-26 20:45:06 +08:00

hopperDownloadRedirect.test.ts

fix(setup): require HTTPS throughout Hopper download redirects

2026-10-24 04:08:59 +08:00

hopperLeaseDescriptorPermissions.test.ts

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

hopperRegexFailureCli.test.ts

test(ci): align fixtures with runtime and evidence contracts

2026-10-17 06:20:23 +00:00

hostRestrictedAvailabilityMcp.test.ts

refactor: retire superseded test-only runtime entrypoints (#7515)

2026-10-28 00:22:43 +08:00

idaWorkspaceCleanup.test.ts

fix(lifecycle): retain IDA cleanup owners and drain JEB fixture work

2026-10-25 09:49:26 +08:00

javascriptAnalysisCancellation.test.ts

feat(javascript): link assignment right-hand sides to their writes (#6206)

2026-10-24 10:04:38 +08:00

javascriptArtifactVerification.test.ts

fix(javascript): preserve artifact failures through cleanup

2026-10-27 05:23:53 +08:00

javascriptFilesystemErrors.test.ts

test(cli): align fixtures with current owning contracts

2026-10-24 08:22:14 +08:00

javascriptJsonDocumentFailures.test.ts

refactor(javascript): remove superseded full-IR analysis pipeline

2026-10-24 23:49:25 +08:00

javascriptRuntimeObservationCli.test.ts

refactor(cli): remove redundant runtime provider contexts

2026-10-23 23:54:04 +08:00

ledgerMutationFailures.test.ts

fix(ci): align static checks and regression fixtures with current contracts (#7349)

2026-10-27 21:24:30 +08:00

mainStartupCancellation.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

managedBundleReadGuards.test.ts

refactor(cli): retain typed analysis outcomes through delivery

2026-10-27 09:16:02 +08:00

mcpDeliveryEnvironment.test.ts

fix(async): own completion across test and provider boundaries

2026-10-25 08:29:20 +08:00

modelHostReadFailure.test.ts

fix(model): keep host I/O failures distinct from unavailable model targets (#6175)

2026-10-23 02:21:50 +08:00

nativeModuleResolverEnvironment.test.ts

fix(config): preserve captured environments across provider launches

2026-10-26 17:39:23 +08:00

peResourcesLifetime.test.ts

fix(providers): preserve bounded artifact reads and cleanup owners

2026-10-17 00:44:02 +08:00

processCaptureFilenameBytes.test.ts

fix(process): retain unrepresentable filename evidence

2026-10-27 12:31:48 +08:00

processCaptureServerEnvironment.test.ts

fix(process): capture MCP process scenarios with the server environment (#6173)

2026-10-23 02:22:03 +08:00

processObservationCommandFinalization.test.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

processPrelaunchCancellation.test.ts

refactor(process): remove the redundant scenario parsing alias

2026-10-24 09:57:15 +08:00

processSnapshotCleanupMcp.test.ts

refactor(mcp): remove the duplicate result delivery class

2026-10-25 02:28:09 +08:00

pwntoolsCleanup.test.ts

feat(firmware): make analysis deadlines recoverable per call

2026-10-21 19:25:22 +08:00

pwntoolsCliFinalization.test.ts

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

pwntoolsCliRemediation.test.ts

fix(pwntools): preserve actionable provider admission errors

2026-10-14 16:10:46 +08:00

pwntoolsStageRetirement.test.ts

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

referenceSourceSymlinkRace.test.ts

fix(async): own completion across test and provider boundaries

2026-10-25 08:29:20 +08:00

regularFileNoFollowFallback.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

runnerCancellation.test.ts

fix(android): report DEX static values of static final fields (#6981)

2026-10-25 02:17:13 +08:00

selectedArtifactSourceLifecycle.test.ts

refactor(filesystem): preserve admitted file facts

2026-10-25 04:09:11 +08:00

setupConfigurationConflicts.test.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

setupConfigurationRollback.test.ts

fix(setup): verify published configuration content during uninstall

2026-10-27 06:43:53 +08:00

setupPolicySnapshot.test.ts

fix(setup): recognize inherited owned launcher

2026-10-27 11:45:01 +08:00

shortFileReads.test.ts

fix(filesystem): complete plist and limits probes

2026-10-27 03:18:56 +08:00

sourceToBundleReferenceGuards.test.ts

refactor(evidence): unify retained inputs across domains (#8299)

2026-10-31 14:45:21 +00:00

stableArtifactConsumers.test.ts

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

updateMaintenance.test.ts

test(ci): allow more time for Windows CLI subprocesses

2026-10-29 14:35:12 +08:00

updateOutput.test.ts

fix(update): distinguish launcher failures from registry errors (#7843)

2026-10-29 01:23:29 +08:00

verifierRun.test.ts

test: consolidate service and process fixtures

2026-10-08 04:03:24 +08:00

windowsNativeControlCapability.test.ts

fix(windows): report missing native launch controls as unavailable capabilities (#6277)

2026-10-23 01:41:25 +08:00

windowsOwnedCommand.test.ts

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

windowsRuntimeAdmission.test.ts

fix(windows): preserve transient runtime admission failures (#2467)

2026-10-13 11:42:54 +08:00