morlutoandCursor Agent b00138be64 fix(verification): retain failed cleanup owners and primary errors (#9993) ...

* fix(verifiers): retain native cleanup ownership on failure

* fix(verification): load cleanup fixtures through the module resolver

CodeQL's local threat model treats file contents passed to
vm.SourceTextModule as user-controlled code execution. Import the real
verifier modules and redirect their dependencies to static mocks instead
of compiling script text read from disk.

* fix(verifiers): own CLI and MCP process families

* fix(verifiers): retire workspaces after cleanup retry

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>

2026-11-11 17:39:19 +08:00

..

abiword

feat(desktop): read XML with a plain DOCTYPE, and check an element's whole text (#9050)

2026-11-07 03:20:12 +00:00

android

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

apkSignature

fix(asn1): preserve decoder capacity refusals (#9932)

2026-11-11 02:26:46 -05:00

binaryDiagnostics

fix(windows): leave a shortcut icon comparison unknown across code pages (#9691)

2026-11-10 15:39:04 -05:00

electron

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

evm

…

firmware

fix(firmware): reject staged files cut off at the per-file limit (#4430)

2026-11-04 19:56:05 +08:00

freecad

feat(desktop): pick seed and end by checkpoint, and keep the capture host out of bundles (#9037)

2026-11-06 10:01:25 +08:00

go

feat(go): recover bounded Go string literals from (ptr, len) headers (#9206)

2026-11-08 22:50:32 +00:00

golden

…

gpu

…

graphql

feat(api-contract): inspect local GraphQL SDL and field references (#9140)

2026-11-06 20:16:31 +08:00

il2cpp

test: strengthen independent oracles and consolidate boundary coverage

2026-11-10 17:03:59 -05:00

inkscape

feat(desktop): pick seed and end by checkpoint, and keep the capture host out of bundles (#9037)

2026-11-06 10:01:25 +08:00

inspector

fix(ci): repair verifier fixtures and formatting failures

2026-11-02 10:59:40 +08:00

interface-builder

…

javascript-endpoint-capture

feat(javascript): compare static endpoints with HAR captures (#9090)

2026-11-06 13:34:26 +08:00

javascript-recovery

…

libreoffice

feat(desktop): pick seed and end by checkpoint, and keep the capture host out of bundles (#9037)

2026-11-06 10:01:25 +08:00

libreoffice-runs

feat(desktop): read XML with a plain DOCTYPE, and check an element's whole text (#9050)

2026-11-07 03:20:12 +00:00

model

…

native-macos

fix(native)!: own Mach-O load commands in binary reader (#7952)

2026-10-29 08:37:36 +08:00

nativeaot

…

nativeaot-producer

fix(ghidra): stage NativeAOT report until recovery completes (#9611)

2026-11-09 19:39:51 +08:00

openapi

feat(contracts): inventory offline OpenAPI operation declarations (#9104)

2026-11-06 15:13:51 +08:00

pcap

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

playwright-trace

feat(browser): import saved Playwright v10 trace evidence (#9127)

2026-11-06 17:52:09 +08:00

replay

test: remove fixtures for retired controlled replay

2026-11-10 16:40:47 -05:00

rust

feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

2026-11-10 05:11:20 -05:00

sqlite

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

swift

…

wasm

…

windows

…

advertisedMcpTool.ts

perf(tests): reduce repeated schema compilation and CLI startup

2026-11-09 08:40:39 +08:00

analysisExecution.ts

…

analysisView.ts

…

apktoolProcessTree.mjs

…

apktoolProcessTree.ts

…

applicationMcpHarness.ts

test: strengthen regression oracles and cleanup ownership (#8152)

2026-10-31 00:22:16 +08:00

artifactClassification.ts

…

artifactComparisonMcp.ts

fix(artifacts): decide how compare_artifacts compares every format_metadata kind (#8231)

2026-11-04 23:53:01 +08:00

artifactEntryOrder.ts

…

artifactEvidence.ts

…

artifactInventory.ts

…

artifactMcpVerifierProbe.mjs

feat(native): retain LLDB source coordinates and verify Pascal calls (#2800)

2026-11-07 23:25:20 +08:00

artifactReaderLifecycle.ts

fix(artifacts): recover interrupted reader preparation

2026-11-10 17:58:04 -05:00

asarHeader.ts

…

binaryPlistObjectTable.ts

…

binaryPlistScalarAlias.ts

…

binarySession.ts

…

binaryTargetAdmission.ts

…

browserFixtureHttpTargets.mjs

fix(test): restrict storage fixture to loopback (#8582)

2026-11-02 02:52:20 +08:00

browserScenarioCancellation.mjs

…

browserScenarioCapture.ts

fix(browser): admit provider reports and preserve source evidence (#10037)

2026-11-11 17:15:47 +08:00

browserScenarioSecrets.ts

…

browserSourceMapCancellation.ts

…

buildCaptureFakes.ts

feat(desktop): build several tasks from one capture, and measure each task's pass rate within a budget (#9216)

2026-11-10 05:26:28 -05:00

buildComputerMcp.ts

fix(verifiers): preserve results and own cleanup through completion

2026-11-10 17:03:59 -05:00

captureDecoderLimits.ts

test: reduce brittle assertions and test-only runtime paths (#9289)

2026-11-08 02:02:31 +08:00

captureGhidraLaunch.cmd

…

captureGhidraLaunch.mjs

…

clientEnvironment.ts

fix(setup)!: bind managed registrations to selected installation

2026-10-28 11:34:28 +00:00

cliJsonStdinProbe.mjs

…

cliMcpEvidenceParity.ts

feat(api-contract): inspect local GraphQL SDL and field references (#9140)

2026-11-06 20:16:31 +08:00

codexToolPolicy.ts

fix(setup)!: bind managed registrations to selected installation

2026-10-28 11:34:28 +00:00

composedWorkflowEvidence.ts

…

contractPresentation.mjs

fix(verifiers): preserve results and own cleanup through completion

2026-11-10 17:03:59 -05:00

cutter_bridge_protocol_test.py

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

cutterBridgeProtocol.ts

…

darwinHelperToolchain.ts

perf(process): reuse a verified Darwin ownership helper across processes (#8318)

2026-10-31 11:12:02 -07:00

descriptorCloseFailure.ts

…

directAnalysisInterrupt.mjs

…

directoryReaderFifoProbe.mjs

…

directoryReaderUnsupportedEntryProbe.mjs

…

electronApiAliasApplication.ts

…

electronBoundaryApplication.ts

…

environmentExportInputProbe.mjs

…

environmentServe.ts

…

environmentStateDerivedValues.ts

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

environmentStateFormWrites.ts

feat(environment): serve the writes that later reads explain (#7274)

2026-10-28 05:05:21 +08:00

environmentStateItemWrites.ts

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

environmentStateLaterReads.ts

feat(environment): serve query numbers, counted values and made objects (#7332)

2026-10-28 07:51:03 +08:00

environmentStateMadeValues.ts

feat(environment): serve query numbers, counted values and made objects (#7332)

2026-10-28 07:51:03 +08:00

environmentStateServing.ts

…

environmentStateVariedCalls.ts

feat(environment): serve writes whose calls send different members (#7539)

2026-10-29 16:14:05 +08:00

environmentStateWrites.ts

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

environmentStateWriteViews.ts

…

espImage.ts

feat(artifacts): inventory and extract ESP32 firmware images (#7498)

2026-10-28 23:18:22 +08:00

evidenceCompletionSignalPreload.mjs

…

evidencePublicationPreload.mjs

…

fakeAgentEnvComputer.ts

fix(views)!: distinguish unavailable artifact collections (#9893)

2026-11-11 17:17:18 +08:00

fakeAgentEnvSolves.ts

fix(agentenv): bind solve results to the named verifier (#9978)

2026-11-11 17:16:09 +08:00

fakeBuildComputerRea.ts

test: strengthen independent oracles and consolidate boundary coverage

2026-11-10 17:03:59 -05:00

fakeCdpBrowser.ts

feat(browser): reuse admitted browser-socket transport and allow discovery_timeout_ms (#9203)

2026-11-08 23:06:56 +00:00

fakeCdpBrowserEvents.ts

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

fakeCdpBrowserResults.ts

feat(browser): reuse admitted browser-socket transport and allow discovery_timeout_ms (#9203)

2026-11-08 23:06:56 +00:00

fakeCdpBrowserTargets.ts

…

fakeCdpBrowserTypes.ts

fix(browser): reject malformed UTF-8 CDP protocol bytes (#10040)

2026-11-11 17:13:45 +08:00

fakeGhidra.mjs

fix(providers): reject malformed UTF-8 bridge responses (#10034)

2026-11-11 17:19:47 +08:00

fakeHopper.mjs

fix(providers): reject malformed UTF-8 bridge responses (#10034)

2026-11-11 17:19:47 +08:00

fakeLauncher.mjs

…

fetchWebSourceMapsOk.ts

…

fifoInput.ts

…

filesystemSnapshotFifoProbe.mjs

…

flutterApk.ts

…

flutterVerifierPreload.mjs

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

ghidraHandshakeProbe.py

…

ghidraRuntime.ts

…

godotPck.ts

feat(artifacts): read Godot 3 PCK version 1 archives (#7781)

2026-10-28 19:43:43 +08:00

historicalHar.ts

…

hopperBookmarkMutationProbe.py

…

hopperBridgeFacadeProbe.py

…

hopperBridgeFrameLimitProbe.py

…

hopperBridgeReconnectProbe.py

fix(hopper): retain bridge after lost shutdown reply (#9604)

2026-11-09 19:34:55 +08:00

hopperCachePublisher.mjs

…

hopperCallerProbe.py

fix(hopper): reconcile observed caller relationships (#7953)

2026-10-29 22:54:58 +08:00

hopperCleanupTimeout.py

fix(verifiers): preserve results and own cleanup through completion

2026-11-10 17:03:59 -05:00

hopperDemoDialogOutcome.py

fix(hopper): distinguish an absent demo dialog from publisher rejection (#8074)

2026-10-30 18:29:18 +08:00

hopperDialogDetection.py

…

hopperDisplaySelection.py

…

hopperInstructionProbe.py

…

hopperLaunchAdmission.mjs

…

hopperLifetimeLaunch.py

…

hopperOrderlyShutdown.py

…

hopperOwnerLifetime.py

…

hopperProcedureSelectionProbe.py

…

hopperRejectionFeed.mjs

…

hopperStringSearchProbe.py

…

hopperXauthority.py

…

httpComparisonBrowser.ts

…

ibtool.ts

test: bound compiler and startup fixture commands with existing owner

2026-11-10 16:47:10 -05:00

idaCallGraph.ts

…

idaMcp.ts

…

idaVerifierCleanup.mjs

fix(verification): retain failed cleanup owners and primary errors (#9993)

2026-11-11 17:39:19 +08:00

idaVerifierCleanupMock.mjs

fix(verification): retain failed cleanup owners and primary errors (#9993)

2026-11-11 17:39:19 +08:00

ines.ts

feat(artifacts): inspect classic iNES container regions (#2816)

2026-10-31 15:49:16 +08:00

inspectionResources.ts

…

interfaceBuilderEncoding.ts

test: bound compiler and startup fixture commands with existing owner

2026-11-10 16:47:10 -05:00

interfaceBuilderMalformedUid.ts

…

javaClassFile.ts

…

javascriptAliasSelectionBudget.ts

…

javascriptArtifactAnalysis.ts

fix: streamline tests and preserve Darwin process ownership (#8275)

2026-10-31 16:43:04 +08:00

javascriptArtifactApplication.ts

…

javascriptArtifactBom.ts

…

javascriptArtifactGraph.ts

…

javascriptArtifactTypeScriptDialect.ts

test: bound compiler and startup fixture commands with existing owner

2026-11-10 16:47:10 -05:00

javascriptCapturedGenericInvocations.ts

…

javascriptCommonJsAnalysis.ts

…

javascriptGetterExpansion.ts

…

javascriptPrimitiveExpansion.ts

…

javascriptReturnShapes.ts

test: preserve independent MCP harness cleanup failures

2026-11-10 16:32:53 -05:00

javascriptRuntimeReconciliation.ts

fix(electron): admit provider reports and bind selected inputs (#10041)

2026-11-11 17:15:54 +08:00

javascriptSemanticGraph.ts

…

javascriptSourceSelection.ts

…

javascriptWorkerCheckpoint.ts

feat(electron): report custom URL protocol registrations

2026-10-31 02:23:47 +08:00

jebMcp.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

keyedArchiveNumberMetadata.ts

…

keyedArchivePrototypeKeys.ts

…

keyedArchiveThreeByteUid.ts

…

keyedArchiveUidShapes.ts

…

keyedArchiveWideIntegers.ts

…

keyedArchiveXmlNesting.ts

…

lifecycleAcknowledgement.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

localToolsMcp.ts

test: preserve independent MCP harness cleanup failures

2026-11-10 16:32:53 -05:00

machoArmSlices.ts

…

managedMemberCapacity.ts

fix(managed): surface capacity limits in member comparison

2026-11-06 13:23:13 +00:00

managedMemberListStarts.ts

fix(managed): preserve unknown member ownership across invalid rows

2026-11-06 21:21:56 +00:00

managedMetadataDelta.ts

…

managedSelectedScope.ts

…

mcpAdvertisedSchemaValidity.ts

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

mcpClientSchemaConstraints.ts

…

mcpDoctorExit.mjs

…

mcpDoctorHang.mjs

…

mcpDoctorReply.mjs

test: focus diagnostics and evidence checks on behavior (#9303)

2026-11-08 16:39:20 +00:00

mcpEvidenceBundle.ts

fix(ci): align static checks and regression fixtures with current contracts (#7349)

2026-10-27 21:24:30 +08:00

mcpSchemaValidation.ts

test(mcp): bound schema compilation for native and web workflows

2026-11-04 00:14:47 +08:00

mcpStartupProbeChild.mjs

…

mcpToolCatalog.ts

…

mcpToolError.ts

…

nativeaotPe.ts

…

nativeCommands.ts

fix(native)!: own Mach-O load commands in binary reader (#7952)

2026-10-29 08:37:36 +08:00

nativeFunctionMatching.c

…

nativeFunctionMatching.ts

…

nativeLoadImage.ts

…

nativeObjcClassImportMachO.ts

…

nativeValueVerifierCleanup.mjs

fix(verification): retain failed cleanup owners and primary errors (#9993)

2026-11-11 17:39:19 +08:00

nativeVerifierCleanupMock.mjs

fix(verification): retain failed cleanup owners and primary errors (#9993)

2026-11-11 17:39:19 +08:00

nodeRuntimeReconciliation.ts

fix(inspector)!: retain context lifetimes across protocol ID reuse (#9471)

2026-11-08 22:04:35 +00:00

ntfsMftExtension.ts

test(ntfs): retain extension facts across inventory and paired workflows

2026-11-11 14:10:25 +08:00

objcPropertyMacho.ts

…

objcRecordBudgetMacho.ts

fix(native): preserve Objective-C records with unreadable protocol lists

2026-11-06 19:09:18 +00:00

optionalObservationProviders.ts

…

outputTreeCommit.ts

feat(desktop): capture, draft, export and witness a task inside a build computer (#9045)

2026-11-07 17:54:59 +08:00

ownerObservationExpectation.ts

test: focus diagnostics and evidence checks on behavior (#9303)

2026-11-08 16:39:20 +00:00

oxlintConfiguration.ts

…

passiveNetworkCapture.ts

…

peCertificateAllowance.ts

fix(pe): report exhausted certificate decoder allowances as resource limits (#7881)

2026-10-29 07:36:56 +08:00

permissionDenial.ts

…

playwrightTrace.ts

feat(browser): import saved Playwright v10 trace evidence (#9127)

2026-11-06 17:52:09 +08:00

processCaptureCancellation.mjs

…

processCleanupCancellation.mjs

…

processDescendantIdentifiers.mjs

…

processFidelity.mjs

…

processFinalization.mjs

…

processIdentity.mjs

…

processRunTokenParserProbe.swift

fix(process): classify withheld Darwin environments before parser failures

2026-11-03 23:48:22 +08:00

processRunTokenSnapshotProbe.swift

fix(process): re-read unreadable tokens before signaling and name the process (#8553)

2026-11-02 00:21:23 -08:00

processSensitiveEcho.mjs

fix(process)!: redact sensitive terminal echoes before retaining Evidence (#7804)

2026-10-28 14:39:34 +00:00

processSnapshotCancellation.mjs

…

protobufCapture.ts

…

providerProcess.mjs

…

providerProcess.ts

…

pwntoolsChangingArtifact.mjs

…

pyinstallerReader.ts

…

reconstructionProofApplicability.ts

fix(ledger): honor every selected fixture proof (#7931)

2026-10-29 07:27:57 +08:00

referenceReaderFifoProbe.mjs

…

renameOpenParent.ts

test(artifacts): handle blocked open-parent renames (#7904)

2026-10-29 13:45:12 +08:00

retainedRuntimeNode.ts

…

strippedAsarAddon.ts

…

temporaryDirectory.ts

…

uimage.ts

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

unityfs.ts

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

universalMacho.ts

…

verifier-mcp-failure.mjs

fix(ghidra): qualify selected project call coverage (#8391)

2026-11-08 08:57:05 +08:00

webModuleTrace.ts

…

webRuntime.ts

fix(browser): keep negative script columns Chrome reports (#8684)

2026-11-03 14:50:00 +08:00

webScriptCapture.ts

…

webSourceLocation.ts

…

windows-native-inspection-failure.cc

…

windowsNativeArtifact.ts

fix(windows): restore native verification fixture coverage (#7479)

2026-10-27 18:50:40 +08:00

wxapkg.ts

feat(artifacts): read WeChat mini-program wxapkg containers (#8148)

2026-11-05 00:52:20 +08:00

x11ProbeHang.py

…

x11ProbeOutput.py

…

zipNames.ts

…

zipSymlinkMetadata.ts

…

zipZstandard.ts

fix(artifacts): report ZIP Zstd window refusals as resource limits

2026-11-06 20:12:31 +00:00