Entrpi 546119b63e feat(artifacts): inventory and extract ESP32 firmware images ...

ESP32-family app and bootloader images (magic 0xE9) had no reader, so
open_binary refused OTA downloads, app partitions and bootloaders.

Add the esp-image container format behind inspect_artifact and
extract_artifact. A pure decoder reads each byte once and keeps only
fixed-size fields. Derived facts cover the chip, from a table cited to
ESP-IDF v6.1; segment classification as ESP-IDF's should_map and
should_load; checksum and appended SHA-256 results; app and bootloader
descriptors; Secure Boot v2 signature blocks, observed and unverified;
and undescribed trailing byte ranges. Truncation and undescribed bytes
make coverage unknown. ESP8266 images are refused with a specific
reason, and ciphertext stays unrecognized.

Add the format to every target, Evidence, snapshot, live-summary and
artifact vocabulary, document it, and add an optional verify:esp-images
lane that compares esptool-built images with esptool image-info and
espsecure signature-info-v2.

Refs #3615

2026-10-27 22:54:29 +11:00

..

ci

refactor(ci): consolidate lint task ownership

2026-10-27 09:55:24 +08:00

fixtures

refactor(native): consolidate provider-neutral analysis contracts

2026-10-27 06:43:53 +08:00

lib

refactor(verification): own browser fixture lifecycle

2026-10-27 13:36:57 +08:00

lint

fix(ci): own mock isolation and normalize Git patch directories

2026-10-25 09:49:26 +08:00

verify

feat(artifacts): inventory and extract ESP32 firmware images

2026-10-27 22:54:29 +11:00

verify-tools/skills

fix(ci): run the lockfile-pinned Skills CLI in package verification (#6235)

2026-10-21 21:19:45 -07:00

audit-website-links.py

fix(website): handle UTF-8 output and slash refs in link audits (#4123)

2026-10-23 02:31:11 +08:00

build-conformance-fixtures.mjs

refactor(schema): remove data-only version markers

2026-09-29 08:45:36 +08:00

build-ghidra-nativeaot.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

build-windows-native.mjs

refactor(windows): share native artifact validation

2026-10-26 16:04:44 +08:00

bundle-runtime.d.mts

perf(cli): bundle runtime entries to reduce Windows startup I/O (#1996)

2026-10-12 09:25:27 +08:00

bundle-runtime.mjs

fix(cli): share builtin argument ownership with MCP routing

2026-10-24 03:16:30 +08:00

check-dependency-install.mjs

fix(deps): run freshness check from escaped paths

2026-07-16 19:51:25 +08:00

check-doc-facts.mjs

build: add canonical product catalog and docs drift checks

2026-07-15 17:43:52 +08:00

clean-build-output.mjs

build: separate runtime artifacts and supervise command ownership

2026-10-09 20:11:17 +08:00

create-ghidra-windows-fixture.mjs

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00

electron-active-hook-boundaries.cjs

fix(electron): block trash calls in active observation hook

2026-10-24 02:36:00 +08:00

electron-active-hook.cjs

fix(electron): preserve callback ownership through listener removal

2026-10-19 09:51:04 +08:00

generate-completion-ledger.mjs

refactor(tooling): move completion ledger generation out of domain

2026-10-26 14:46:35 +08:00

generate-error-schema.mjs

chore: migrate formatting to Oxfmt (#615)

2026-10-06 01:59:19 +08:00

generate-mcp-tool-catalog.mjs

build: separate runtime artifacts and supervise command ownership

2026-10-09 20:11:17 +08:00

generate-nativeaot-fixtures.mjs

fix(ghidra): resolve file offsets in decompile (#2101)

2026-10-13 18:23:17 +08:00

generate-package-metadata.mjs

fix(skills): parse metadata only from YAML frontmatter

2026-10-26 15:49:58 +08:00

generate-product-catalog.mjs

fix(build): make catalogs and packaged skills generated outputs (#1086)

2026-10-08 22:43:51 +08:00

generate-skill-metadata.mjs

fix(skills): parse metadata only from YAML frontmatter

2026-10-26 15:49:58 +08:00

generate-third-party-inventory.mjs

fix: align MCP archive contracts and documentation (#2478)

2026-10-13 12:06:41 +08:00

hopper-demo-x11.py

fix(hopper): pass private X authority cookie through stdin

2026-10-24 03:00:07 +08:00

prepack.mjs

refactor(cli): share process environment preparation

2026-10-24 11:50:11 +08:00

prepare-reverse-tools-mutation.mjs

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

prepare-website.py

feat(website): add multilingual editions and translation workflow

2026-10-11 17:24:46 +08:00

prepare.mjs

fix(build): prepare release dependency types during installation (#6978)

2026-10-24 09:24:43 +00:00

print-mcp-config.mjs

fix(npm): use latest entry points without install scripts

2026-07-17 00:16:46 +00:00

rea-android-workspace-guardian.mjs

fix(android): clean Windows workspaces after owner termination (#2440)

2026-10-13 22:03:16 +08:00

rea.mjs

refactor(cli): use builtin argument owner directly

2026-10-27 09:29:20 +08:00

record-catalog-digests.mjs

feat(mcp): support compact output schema advertisements (#7218)

2026-10-26 17:59:51 +08:00

record-mcp-catalog.mjs

perf(mcp): defer analysis runtime after catalog discovery (#4424)

2026-10-22 03:07:31 +00:00

release-notes.mjs

fix(release): avoid duplicated contributor thanks

2026-10-11 11:49:49 +08:00

release-npm-tag.mjs

refactor(release): remove obsolete tag CLI and proposal output

2026-10-24 11:41:34 +08:00

release-proposal.mjs

refactor(release): remove obsolete tag CLI and proposal output

2026-10-24 11:41:34 +08:00

run-development-tests.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-exact-tests.mjs

fix(test): reject excluded symlink aliases in exact selection

2026-10-14 13:58:17 +08:00

run-exclusive-command.mjs

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

run-exclusive.mjs

fix(runner): scope internal Node notices to the supervisor (#7020)

2026-10-24 15:57:23 +00:00

run-turbo.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-typescript.d.mts

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-typescript.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

scan-todos.mjs

chore(scripts): merge duplicate node:fs import in scan-todos (#1790)

2026-10-11 18:18:10 +08:00

test-website.py

docs(readme): add Roman Urdu edition (#6499)

2026-10-23 16:06:27 +08:00

verify-adb.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-agent-experience.mjs

fix(skills): parse metadata only from YAML frontmatter

2026-10-26 15:49:58 +08:00

verify-agentenv-environment.mjs

feat(environment): build agent environments from a prompt (#6946)

2026-10-24 21:51:41 +08:00

verify-apk-signature.mjs

test(ci): align source preservation and catalog assertions

2026-10-27 02:35:54 +08:00

verify-apktool.mjs

feat(apktool): share one APK resource decode across selected locale tables (#4777) (#4804)

2026-10-18 03:57:17 +08:00

verify-binary-layout.mjs

refactor(verifiers): centralize named artifact output admission

2026-10-26 22:48:22 +08:00

verify-browser-dom-destinations.mjs

fix(verification): retain browser profile until shutdown

2026-10-27 13:42:36 +08:00

verify-browser-modules.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-network.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-request.mjs

feat(environment): build agent environments from a prompt (#6946)

2026-10-24 21:51:41 +08:00

verify-browser-runtime.mjs

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

verify-browser-scripts.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-source-maps.mjs

fix(verifiers): require positive ownership and restore cleanup coverage

2026-10-14 09:47:57 +08:00

verify-claude-client.mjs

feat(mcp): scope advertised tools by family (#7228)

2026-10-26 19:50:12 +08:00

verify-commandcode-client.mjs

refactor(verification): share native client fixture assertions

2026-10-26 15:34:11 +08:00

verify-conformance-fixtures.mjs

refactor: consolidate binary artifact interpretation and fixture ownership

2026-10-26 16:21:11 +08:00

verify-copilot-client.mjs

refactor(verification): centralize native client result discovery

2026-10-26 15:40:34 +08:00

verify-deepseek-client.mjs

refactor: centralize input validation and schema interpretation

2026-10-26 17:05:05 +08:00

verify-evm-interface.mjs

refactor(verifiers): centralize named artifact output admission

2026-10-26 22:48:22 +08:00

verify-flutter.mjs

refactor(verifiers): centralize named artifact output admission

2026-10-26 22:48:22 +08:00

verify-frida.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-gemini-client.mjs

fix(verification): unify client schema traversal and reference checks

2026-10-26 17:15:58 +08:00

verify-ghidra-bridge-sources.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

verify-go-binary.mjs

refactor(verifiers): centralize named artifact output admission

2026-10-26 22:48:22 +08:00

verify-grok-client.mjs

refactor(verification): share native client fixture assertions

2026-10-26 15:34:11 +08:00

verify-http3-network-captures.mjs

refactor(verifiers): consolidate capture result admission and parity

2026-10-26 23:12:34 +08:00

verify-il2cpp-metadata.mjs

refactor(verifiers): centralize named artifact output admission

2026-10-26 22:48:22 +08:00

verify-jeb.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-linux-setup-e2e.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-mcp-registry-metadata.mjs

feat(electron): add autonomous Electron runtime analysis (#464)

2026-08-05 19:07:46 +08:00

verify-module-boundaries.mjs

test: harden verification fixtures and runtime coverage

2026-10-14 08:59:27 +08:00

verify-native-agent-client.mjs

refactor(verification): centralize native client result discovery

2026-10-26 15:40:34 +08:00

verify-native-calls.mjs

fix(ci): validate artifact MCP replies against named schemas (#6021)

2026-10-21 23:28:12 +08:00

verify-native-ui.mjs

fix(native)!: preserve UI scalar facts and selection failures

2026-10-24 04:25:13 +08:00

verify-node-sea.mjs

feat(artifacts): inventory and extract Node.js single executable application blobs (#7000)

2026-10-25 02:10:41 +08:00

verify-omp-client.mjs

refactor(verification): share native client fixture assertions

2026-10-26 15:34:11 +08:00

verify-opencode-client.mjs

refactor(verification): centralize native client result discovery

2026-10-26 15:40:34 +08:00

verify-package-artifact.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-capabilities.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-discovery.d.mts

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-package-discovery.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-environment.d.mts

fix(test): use direct Node launcher on macOS

2026-07-24 03:31:26 +00:00

verify-package-environment.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-package-evidence.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-install.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-managed.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-mcp.mjs

fix(verifiers): preserve source Evidence through shared admission

2026-10-27 01:11:51 +08:00

verify-package-pack.mjs

fix(skills): parse metadata only from YAML frontmatter

2026-10-26 15:49:58 +08:00

verify-package-platform.d.mts

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-package-platform.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-prompts.mjs

test(mcp): align completion checks with provider readiness

2026-10-12 18:44:02 +08:00

verify-package-setup-plan.d.mts

fix(ci): correlate ownership trace threads and preserve setup failures

2026-10-20 00:05:22 +08:00

verify-package-setup-plan.mjs

fix(ci): correlate ownership trace threads and preserve setup failures

2026-10-20 00:05:22 +08:00

verify-package-setup.d.mts

fix(verifiers): own setup terminal and snapshot lifetimes

2026-10-24 17:54:18 +08:00

verify-package-setup.mjs

fix(setup): register explicit MCP runtimes and preserve launcher identity

2026-10-26 02:33:31 +08:00

verify-package-unknown-provider.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-update.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package.mjs

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-packaged-ghidra-windows.mjs

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

verify-packaged-wasm-artifact.mjs

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-packed-bridge.d.mts

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-packed-bridge.mjs

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-packet-capture.mjs

refactor(verifiers): consolidate capture result admission and parity

2026-10-26 23:12:34 +08:00

verify-pcap.mjs

refactor(verifiers): centralize named artifact output admission

2026-10-26 22:48:22 +08:00

verify-pe-load-config.mjs

feat(pe): inspect TLS callbacks and load configuration (#7008)

2026-10-24 22:06:41 +08:00

verify-published-package.mjs

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

verify-qlog-captures.mjs

refactor(verifiers): consolidate capture result admission and parity

2026-10-26 23:12:34 +08:00

verify-qwen-client.mjs

refactor(verification): centralize native client result discovery

2026-10-26 15:40:34 +08:00

verify-real-browser.mjs

refactor(verification): own browser fixture lifecycle

2026-10-27 13:36:57 +08:00

verify-real-cutter.mjs

fix(verify): request command JSON for Cutter inspection

2026-10-18 07:34:08 +08:00

verify-real-electron.mjs

fix: bind Electron actions to the selected native window

2026-10-24 02:29:08 +08:00

verify-real-ghidra-6502.mjs

fix(verifiers): consolidate Ghidra MCP result admission

2026-10-27 00:49:27 +08:00

verify-real-ghidra-address-context.mjs

fix(verifiers): consolidate Ghidra MCP result admission

2026-10-27 00:49:27 +08:00

verify-real-ghidra-assertions.mjs

fix(verifiers): propagate session assertion failures synchronously

2026-10-25 07:56:26 +08:00

verify-real-ghidra-com.mjs

refactor(native): consolidate provider-neutral analysis contracts

2026-10-27 06:43:53 +08:00

verify-real-ghidra-decompile-timeout.mjs

feat(mcp): support runtime analysis limit recovery (#7049)

2026-10-25 09:45:26 +08:00

verify-real-ghidra-decompiler-failure.mjs

feat(ghidra): bound one procedure's decompile without closing the session (#5662)

2026-10-24 07:42:50 +08:00

verify-real-ghidra-dol.mjs

refactor(native): consolidate provider-neutral analysis contracts

2026-10-27 06:43:53 +08:00

verify-real-ghidra-dos.mjs

refactor(native): consolidate provider-neutral analysis contracts

2026-10-27 06:43:53 +08:00

verify-real-ghidra-function.mjs

perf(ghidra): omit redundant raw results (#5355)

2026-10-20 05:14:33 +00:00

verify-real-ghidra-inventory.mjs

fix(ghidra): unify Unicode literal search semantics

2026-10-27 11:10:10 +08:00

verify-real-ghidra-m68k.mjs

fix(verifiers): consolidate Ghidra MCP result admission

2026-10-27 00:49:27 +08:00

verify-real-ghidra-mips-relocatable.mjs

refactor(native): consolidate provider-neutral analysis contracts

2026-10-27 06:43:53 +08:00

verify-real-ghidra-mips-shared.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-mips.mjs

refactor(native): consolidate provider-neutral analysis contracts

2026-10-27 06:43:53 +08:00

verify-real-ghidra-nativeaot.mjs

fix(verifiers): consolidate Ghidra MCP result admission

2026-10-27 00:49:27 +08:00

verify-real-ghidra-noreturn.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-ppc.mjs

refactor(native): consolidate provider-neutral analysis contracts

2026-10-27 06:43:53 +08:00

verify-real-ghidra-raw.mjs

fix(verifiers): consolidate Ghidra MCP result admission

2026-10-27 00:49:27 +08:00

verify-real-ghidra-riscv.mjs

refactor(native): consolidate provider-neutral analysis contracts

2026-10-27 06:43:53 +08:00

verify-real-ghidra-swift.mjs

fix(verifiers): consolidate Ghidra MCP result admission

2026-10-27 00:49:27 +08:00

verify-real-ghidra-switch-assertions.mjs

fix(ghidra): recover evidenced switch cases and default targets (#579)

2026-10-05 22:54:17 +08:00

verify-real-ghidra-switch-controls.mjs

chore: migrate formatting to Oxfmt (#615)

2026-10-06 01:59:19 +08:00

verify-real-ghidra-switch.mjs

fix(verifiers): consolidate Ghidra MCP result admission

2026-10-27 00:49:27 +08:00

verify-real-ghidra-windows.mjs

perf(ghidra): omit redundant raw results (#5355)

2026-10-20 05:14:33 +00:00

verify-real-ghidra.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-hopper-deadlines.mjs

refactor(hopper): move verifier assertions out of runtime

2026-10-24 11:19:45 +08:00

verify-real-hopper-fat.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-real-hopper-linux.mjs

test(hopper): repair Linux demo setup and native verification (#2638)

2026-10-13 14:39:18 +08:00

verify-real-hopper.mjs

refactor(hopper): move verifier assertions out of runtime

2026-10-24 11:19:45 +08:00

verify-real-ida.mjs

refactor(native): consolidate provider-neutral analysis contracts

2026-10-27 06:43:53 +08:00

verify-real-kuna.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-reconstruction-readiness.mjs

fix(verifiers): preserve source Evidence through shared admission

2026-10-27 01:11:51 +08:00

verify-recorded-crash.mjs

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

verify-release-artifact.mjs

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

verify-release-checkpoint.mjs

fix(release): validate frozen checkpoint versions and breaking notes

2026-10-08 10:13:05 +00:00

verify-repository-skill.mjs

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-signal-recording.mjs

refactor(verifiers): consolidate capture result admission and parity

2026-10-26 23:12:34 +08:00

verify-solidity-metadata.mjs

feat(evm): inspect lossless Solidity terminal CBOR metadata (#2790)

2026-10-13 21:55:30 +08:00

verify-test-discovery.mjs

fix(verify): report final success only after resource cleanup

2026-10-09 04:12:49 +08:00

verify-test-temp-hygiene.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-wasm-artifact.mjs

fix(verifiers): preserve source Evidence through shared admission

2026-10-27 01:11:51 +08:00

verify-wasm-interface-comparison.mjs

fix(verifiers): preserve source Evidence through shared admission

2026-10-27 01:11:51 +08:00

verify-web-network-captures.mjs

refactor(verifiers): consolidate capture result admission and parity

2026-10-26 23:12:34 +08:00

verify-website.py

docs(readme): add Roman Urdu edition (#6499)

2026-10-23 16:06:27 +08:00

verify-windows-native-artifact.mjs

refactor(windows): share native artifact validation

2026-10-26 16:04:44 +08:00

verify-windows-native-inspection.mjs

fix(verification): keep runtime packaging and boundary fixtures complete

2026-10-26 16:46:53 +08:00

verify-windows-native.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-windows-package.mjs

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

website_i18n.py

docs(readme): add Roman Urdu edition (#6499)

2026-10-23 16:06:27 +08:00

website.py

fix(website): improve layout and clarify homepage copy

2026-10-26 01:33:31 +08:00

windows-capabilities.mjs

refactor(tooling): move verifier host helpers out of runtime

2026-10-26 14:46:23 +08:00