Edgar ArakelyanandClaude Opus 5.5 69f38a78b9 fix(browser): bound saved-response reads and refuse values a request cannot carry ...

- Each read of a saved response (the wait, sizes() and text()) races the
  step's deadline and abort signal, so a body still arriving when the
  step times out or is cancelled saves nothing, and the watcher detaches
  at once.
- A UI step keeps the 4,000,000-character cap and refuses before reading
  only a response received as more than 12,000,000 bytes, three per
  character; the decoded text is then held to the character cap.
- A Basic username with a colon fails the step before anything is sent.
- A saved `.` or `..` that fills a whole URL path segment fails the
  step, since the URL would drop it.
- Held entities that spell `&` both ways leave a create without `&` no
  slug rule.
- The saved-values example in the browser scenario contract is a whole
  scenario, as the catalog test reads every documented example.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-26 08:15:38 -07:00

..

.vitepress

docs(environments): explain building RL environments with REA

2026-10-26 00:16:52 +08:00

assets

docs(readme): show a dark showcase image on dark themes (#6915)

2026-10-24 05:51:22 +08:00

design

feat(native): make function matching allowance configurable (#7159)

2026-10-26 02:22:32 +08:00

readme

docs(environments): lead with agent prompts

2026-10-26 00:40:56 +08:00

releases

chore(main): release rea-agents 6.8.0 (#5004)

2026-10-25 16:35:15 +08:00

specs

fix(browser): bound saved-response reads and refuse values a request cannot carry

2026-10-26 08:15:38 -07:00

verification

feat(mcp): support runtime analysis limit recovery (#7049)

2026-10-25 09:45:26 +08:00

adb-device-analysis.md

fix(adb): own numeric declaration validation and diagnostics

2026-10-24 06:34:33 +08:00

agent-environments-quickstart.md

docs(environments): explain building RL environments with REA

2026-10-26 00:16:52 +08:00

agent-environments.md

chore: merge main into recorder saved values

2026-10-26 08:06:06 -07:00

android-analysis.md

docs(settings): explain runtime design and provider recovery

2026-10-25 09:56:11 +08:00

apk-signature.md

fix(artifacts): retain completed acquisition facts through finalization

2026-10-24 23:51:20 +08:00

apktool-resource-analysis.md

fix(filesystem): distinguish admission and bound-target failures

2026-10-24 11:27:27 +08:00

apple-application-analysis.md

fix(apple): keep dyld candidates inside the analyzed root on Windows (#6955)

2026-10-24 16:10:18 +08:00

apple-ips.md

fix(apple): keep the documented terminating process, parent pid and metadata members of IPS reports (#7079)

2026-10-25 13:56:51 +08:00

architecture.mermaid

docs: clarify ownership and cleanup review guidance

2026-10-25 06:51:31 +08:00

binary-diagnostics.md

feat(binary-layout): admit ELF32 i386, ARM and MIPS layout profiles (#7052)

2026-10-25 14:18:44 +08:00

browser-observation.md

fix(browser): admit JSON shape expansion against shared retention

2026-10-25 09:49:26 +08:00

browser-scenario-contract.md

fix(browser): bound saved-response reads and refuse values a request cannot carry

2026-10-26 08:15:38 -07:00

ci-analysis.md

docs(ci): add a repeatable static analysis example (#6496)

2026-10-23 23:42:58 +09:00

cli.md

fix(mcp)!: require allowed hosts for non-loopback HTTP binds (#7172)

2026-10-26 22:55:10 +08:00

client-configuration.md

feat(mcp): scope advertised tools by family (#7228)

2026-10-26 19:50:12 +08:00

client-verification.md

fix(setup): register explicit MCP runtimes and preserve launcher identity

2026-10-26 02:33:31 +08:00

desktop-applications.md

docs(desktop): list all supported IL2CPP metadata versions

2026-10-24 00:11:41 +08:00

devicetree.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

docs(settings): explain runtime design and provider recovery

2026-10-25 09:56:11 +08:00

elf-notes.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

erlang-beam.md

test(erlang): cover lambdas names filter and chunks miss in BEAM views (#6973)

2026-10-24 17:39:57 +08:00

error-contract.schema.json

fix(deps): upgrade zod without narrowing timestamp inputs

2026-10-26 20:13:12 +08:00

evm-bytecode.md

fix(evm): preserve reply allowance failures and selected limits

2026-10-24 02:40:21 +08:00

firmware-analysis.md

feat(firmware): inspect flattened devicetree blobs (#7009)

2026-10-24 22:45:22 +08:00

flutter-analysis.md

fix(flutter): qualify unsupported unified snapshot profiles

2026-10-24 04:28:54 +08:00

frida-instrumentation.md

fix!: retain Frida observations through shared finalization

2026-10-24 01:47:31 +08:00

ghidra-dol.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

ghidra-dos.md

fix(targets): keep original DOS header padding out of e_lfanew (#7013)

2026-10-25 01:54:20 +08:00

ghidra-mips.md

fix(ghidra): admit recordless MIPS-I legacy targets (#7014)

2026-10-25 01:16:51 +08:00

ghidra-nativeaot.md

fix(nativeaot): charge only examined candidate table entries

2026-10-24 04:23:56 +08:00

ghidra-ppc.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

ghidra-provider.md

fix(ghidra): scope rejected-input diagnostics to their request (#7140)

2026-10-25 22:37:32 +08:00

ghidra-psp.md

feat(ghidra): admit bounded PSP ELF through installed Allegrex (#1599)

2026-10-11 19:47:33 +08:00

ghidra-riscv.md

feat(ghidra): support raw NMOS 6502 analysis (#2079)

2026-10-13 21:13:01 +08:00

go-binaries.md

merge: consolidate upstream ownership and coverage fixes

2026-10-24 04:43:33 +08:00

godot-pck.md

fix(artifacts): retain raw archive keys across entry projections

2026-10-25 03:30:22 +08:00

gpu-code-objects.md

fix(gpu): derive legacy bundle extents from codec framing

2026-10-24 02:35:21 +08:00

harmony-analysis.md

fix(harmony): retain path-only package and signing observations

2026-10-24 02:40:22 +08:00

http3-capture-lab.md

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

ida-provider.md

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

il2cpp-metadata.md

fix(il2cpp): link arm64 builds whose registrations were inlined (#6989)

2026-10-25 04:21:18 +08:00

index.md

feat(elf): inspect Linux kernel module metadata (#7010)

2026-10-24 22:35:20 +08:00

installation.md

feat(ghidra): reuse existing projects through verified copies (#7236)

2026-10-26 22:31:13 +08:00

javascript-application-graph.md

fix(javascript): separate endpoint syntax correspondence from target identity

2026-10-24 03:59:44 +08:00

javascript-application-workflows.md

fix(javascript): bound loop capture and rest-copy expansion

2026-10-24 19:36:20 +08:00

javascript-artifact-reconstruction.md

fix(javascript): bind defaulted and destructured Webpack factory roles (#7117)

2026-10-25 05:23:23 -07:00

javascript-recovery.md

fix(javascript): preserve recovery acquisition and cancellation failures

2026-10-24 03:11:07 +08:00

javascript-route-inventory.md

fix(javascript): preserve route selection owners and uncertainty

2026-10-24 04:25:13 +08:00

javascript-runtime-observation.md

fix(inspector): retain captures through authorization cleanup failures

2026-10-24 03:16:30 +08:00

javascript-runtime-reconciliation.md

fix(browser): preserve unknown script ownership through reconciliation

2026-10-24 04:23:56 +08:00

jeb-analysis.md

fix(jeb): retain selected inputs and completed primary replies

2026-10-24 03:00:07 +08:00

kernel-modules.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

kuna-provider.md

fix(providers): preserve launch selections and refresh obsolete Kuna exports

2026-10-26 22:22:27 +08:00

managed-code-analysis.md

fix(managed): preserve malformed signature uncertainty in comparisons

2026-10-24 10:17:23 +08:00

mcp-contracts.md

fix(mcp)!: require allowed hosts for non-loopback HTTP binds (#7172)

2026-10-26 22:55:10 +08:00

mcp-prompts.md

feat(mcp): scope advertised tools by family (#7228)

2026-10-26 19:50:12 +08:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

model-artifacts.md

fix(model): preserve uncertainty across released GGUF layouts

2026-10-24 02:00:10 +08:00

native-function-matching.md

feat(native): make function matching allowance configurable (#7159)

2026-10-26 02:22:32 +08:00

native-investigation.md

fix(plist): own dictionary decoding across Apple workflows

2026-10-26 22:20:00 +08:00

node-sea.md

fix(artifacts): preserve opaque Node SEA asset keys

2026-10-25 02:54:17 +08:00

packet-captures.md

fix(captures): preserve canonical TShark alias fields

2026-10-23 19:07:46 +08:00

pcap-analysis.md

fix(pcap): preserve header snapshot limit with inferred lengths

2026-10-24 10:35:50 +08:00

pe-certificates.md

fix(pe): accept WIN_CERTIFICATE padding counted in dwLength (#6721)

2026-10-24 06:04:41 +08:00

pe-imports.md

fix(pe): share header identity across native metadata readers

2026-10-24 16:08:26 +08:00

pe-load-config.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

process-capture.md

fix(paths): preserve native traversal and unset PATH semantics

2026-10-26 14:17:27 +08:00

python-packaged-applications.md

fix(artifacts): retain raw archive keys across entry projections

2026-10-25 03:30:22 +08:00

python-pyc.md

feat(python): query selected pyc code-object facts (#6928)

2026-10-24 10:23:06 +08:00

raw-binary.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

reconstruction-coverage.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction): qualify original process evidence at its owner

2026-10-24 06:13:53 +08:00

reconstruction-readiness.md

refactor(verification): separate readiness evidence scopes

2026-10-24 11:31:39 +08:00

recorded-crashes.md

feat(apple): inspect IPS crash reports (#6511)

2026-10-24 16:02:59 +08:00

releasing.md

fix(release): reject missing manifest release boundaries

2026-10-25 17:25:18 +08:00

reverse-engineering-tools.md

docs(cutter): explain bridge descriptor discovery configuration

2026-10-24 17:21:08 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

signal-recordings.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

sqlite-databases.md

test(sqlite): preserve worker failures through cleanup retry

2026-10-24 12:34:10 +08:00

testing.md

feat(binary-layout): admit ELF32 i386, ARM and MIPS layout profiles (#7052)

2026-10-25 14:18:44 +08:00

tool-design.md

docs: clarify ownership and cleanup review guidance

2026-10-25 06:51:31 +08:00

user-visible-errors.csv

fix(windows): explain when Windows refuses to load the verified native addon (#6832)

2026-10-24 11:37:58 +08:00

wasm-artifacts.md

docs(settings): explain runtime design and provider recovery

2026-10-25 09:56:11 +08:00

web-network-captures.md

fix(browser): bound saved-response reads and refuse values a request cannot carry

2026-10-26 08:15:38 -07:00

web-runtime.md

fix(browser): retain truthful cleanup facts and document request ownership

2026-10-24 03:59:44 +08:00

web-source-location.md

fix(browser): preserve completed source-map observations

2026-10-25 05:09:26 +08:00

website-module-trace.md

fix(analysis): preserve artifact and selection error ownership

2026-10-24 22:54:05 +08:00

website-script-export.md

docs: correct setup capture and recovery boundary guidance

2026-10-24 02:40:21 +08:00

windows-ghidra-p0.md

fix(windows): explain when Windows refuses to load the verified native addon (#6832)

2026-10-24 11:37:58 +08:00