Edgar ArakelyanandClaude Opus 5.5 755ff814b2 fix(browser): keep request steps on their origin and their page values redacted ...

- Follow no redirects: a redirect fails the step and nothing reaches the
  location it names (checked in real Chrome), and check the page's origin
  again in the page as the request is sent.
- Send nothing once the step's time has run out or it was cancelled while
  header values were read; the in-page deadline is what remains of the step's.
- Keep every page value redacted under a repeated or colliding label, keep a
  value's first marker when it is read again, and leave values shorter than
  8 characters unredacted rather than rewriting ids, ports and hosts.
- Refuse a header name given twice, User-Agent (Chrome drops it) and line
  breaks in literal values and prefixes; fail before sending when a secret or
  page value holds them.
- Append query entries after the path's literal query without re-encoding it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-23 20:42:16 -07:00

..

ci

fix(release): isolate npm publication from dependency execution (#6681)

2026-10-23 12:27:24 +00:00

fixtures

fix(browser): keep request steps on their origin and their page values redacted

2026-10-23 20:42:16 -07:00

lib

fix(browser): keep request steps on their origin and their page values redacted

2026-10-23 20:42:16 -07:00

verify

test(apple): distinguish root discovery from dylib resolution coverage

2026-10-24 08:22:14 +08:00

verify-tools/skills

fix(ci): run the lockfile-pinned Skills CLI in package verification (#6235)

2026-10-21 21:19:45 -07:00

audit-website-links.py

fix(website): handle UTF-8 output and slash refs in link audits (#4123)

2026-10-23 02:31:11 +08:00

build-conformance-fixtures.mjs

refactor(schema): remove data-only version markers

2026-09-29 08:45:36 +08:00

build-ghidra-nativeaot.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

build-windows-native.mjs

fix(windows): retain failed native inspection ownership (#1826)

2026-10-11 21:33:25 +08:00

bundle-runtime.d.mts

perf(cli): bundle runtime entries to reduce Windows startup I/O (#1996)

2026-10-12 09:25:27 +08:00

bundle-runtime.mjs

fix(cli): share builtin argument ownership with MCP routing

2026-10-24 03:16:30 +08:00

check-dependency-install.mjs

fix(deps): run freshness check from escaped paths

2026-07-16 19:51:25 +08:00

check-doc-facts.mjs

build: add canonical product catalog and docs drift checks

2026-07-15 17:43:52 +08:00

clean-build-output.mjs

build: separate runtime artifacts and supervise command ownership

2026-10-09 20:11:17 +08:00

create-ghidra-windows-fixture.mjs

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00

electron-active-hook-boundaries.cjs

fix(electron): block trash calls in active observation hook

2026-10-24 02:36:00 +08:00

electron-active-hook.cjs

fix(electron): preserve callback ownership through listener removal

2026-10-19 09:51:04 +08:00

generate-completion-ledger.mjs

fix(build): make catalogs and packaged skills generated outputs (#1086)

2026-10-08 22:43:51 +08:00

generate-error-schema.mjs

chore: migrate formatting to Oxfmt (#615)

2026-10-06 01:59:19 +08:00

generate-mcp-tool-catalog.mjs

build: separate runtime artifacts and supervise command ownership

2026-10-09 20:11:17 +08:00

generate-nativeaot-fixtures.mjs

fix(ghidra): resolve file offsets in decompile (#2101)

2026-10-13 18:23:17 +08:00

generate-package-metadata.mjs

fix(runtime): align remaining Node security pins and setup guidance (#6316)

2026-10-23 11:03:03 +00:00

generate-product-catalog.mjs

fix(build): make catalogs and packaged skills generated outputs (#1086)

2026-10-08 22:43:51 +08:00

generate-skill-metadata.mjs

perf(mcp)!: default to compact input schema advertisements (#5975)

2026-10-22 00:17:11 +08:00

generate-third-party-inventory.mjs

fix: align MCP archive contracts and documentation (#2478)

2026-10-13 12:06:41 +08:00

hopper-demo-x11.py

fix(hopper): pass private X authority cookie through stdin

2026-10-24 03:00:07 +08:00

prepack.mjs

fix(cli): share builtin argument ownership with MCP routing

2026-10-24 03:16:30 +08:00

prepare-reverse-tools-mutation.mjs

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

prepare-website.py

feat(website): add multilingual editions and translation workflow

2026-10-11 17:24:46 +08:00

prepare.mjs

build: streamline local and CI validation

2026-07-22 16:06:28 +00:00

print-mcp-config.mjs

fix(npm): use latest entry points without install scripts

2026-07-17 00:16:46 +00:00

rea-android-workspace-guardian.mjs

fix(android): clean Windows workspaces after owner termination (#2440)

2026-10-13 22:03:16 +08:00

rea.mjs

fix(cli): share doctor argument ownership across dispatchers

2026-10-24 08:54:44 +08:00

record-catalog-digests.mjs

perf(mcp): record catalog identities for all schema profiles (#5415)

2026-10-20 10:09:28 +00:00

record-mcp-catalog.mjs

perf(mcp): defer analysis runtime after catalog discovery (#4424)

2026-10-22 03:07:31 +00:00

release-notes.mjs

fix(release): avoid duplicated contributor thanks

2026-10-11 11:49:49 +08:00

release-npm-tag.mjs

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

run-development-tests.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-exact-tests.mjs

fix(test): reject excluded symlink aliases in exact selection

2026-10-14 13:58:17 +08:00

run-exclusive-command.mjs

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

run-exclusive.mjs

build: separate runtime artifacts and supervise command ownership

2026-10-09 20:11:17 +08:00

run-turbo.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-typescript.d.mts

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-typescript.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

scan-todos.mjs

chore(scripts): merge duplicate node:fs import in scan-todos (#1790)

2026-10-11 18:18:10 +08:00

test-website.py

docs(readme): add Roman Urdu edition (#6499)

2026-10-23 16:06:27 +08:00

verify-adb.mjs

fix(scripts): remove the ADB verifier's pushed probe file from the device (#5256)

2026-10-23 05:56:19 +08:00

verify-agent-experience.mjs

fix(evaluation): align scenario prompts and outcome gates

2026-10-24 02:36:00 +08:00

verify-agentenv-environment.mjs

test(environment): build the real-agentenv lane's bundle with environment-build

2026-10-23 16:48:07 -07:00

verify-apk-signature.mjs

feat(apk): inspect signing declarations with retained fact queries

2026-10-22 11:48:09 +00:00

verify-apktool.mjs

feat(apktool): share one APK resource decode across selected locale tables (#4777) (#4804)

2026-10-18 03:57:17 +08:00

verify-binary-layout.mjs

test(binary): compare layout evidence under the same resource budget

2026-10-24 08:40:20 +08:00

verify-browser-dom-destinations.mjs

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

verify-browser-modules.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-network.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-request.mjs

test(browser): verify request steps in a real browser through to a built environment

2026-10-23 19:18:13 -07:00

verify-browser-runtime.mjs

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

verify-browser-scripts.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-source-maps.mjs

fix(verifiers): require positive ownership and restore cleanup coverage

2026-10-14 09:47:57 +08:00

verify-claude-client.mjs

perf(mcp)!: default to compact input schema advertisements (#5975)

2026-10-22 00:17:11 +08:00

verify-commandcode-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-conformance-fixtures.mjs

refactor(schema): remove data-only version markers

2026-09-29 08:45:36 +08:00

verify-copilot-client.mjs

fix(verification): bind Copilot schema profile to observed inputs

2026-10-24 03:16:29 +08:00

verify-deepseek-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-evm-interface.mjs

feat(evm): inspect lossless Solidity terminal CBOR metadata (#2790)

2026-10-13 21:55:30 +08:00

verify-flutter.mjs

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

verify-frida.mjs

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

verify-gemini-client.mjs

fix(contracts): preserve safe defaults and client literal guidance

2026-10-24 03:00:09 +08:00

verify-ghidra-bridge-sources.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

verify-go-binary.mjs

test: harden verification fixtures and runtime coverage

2026-10-14 08:59:27 +08:00

verify-grok-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-http3-network-captures.mjs

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

verify-il2cpp-metadata.mjs

feat(il2cpp): link native methods and export Ghidra seeds

2026-10-20 21:56:54 +08:00

verify-jeb.mjs

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

verify-linux-setup-e2e.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-mcp-registry-metadata.mjs

feat(electron): add autonomous Electron runtime analysis (#464)

2026-08-05 19:07:46 +08:00

verify-module-boundaries.mjs

test: harden verification fixtures and runtime coverage

2026-10-14 08:59:27 +08:00

verify-native-agent-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-native-calls.mjs

fix(ci): validate artifact MCP replies against named schemas (#6021)

2026-10-21 23:28:12 +08:00

verify-native-ui.mjs

fix(native)!: preserve UI scalar facts and selection failures

2026-10-24 04:25:13 +08:00

verify-omp-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-opencode-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-package-artifact.mjs

feat(native): add investigation features (#486)

2026-09-30 00:41:05 +08:00

verify-package-capabilities.mjs

test(package): select the intended Hopper smoke-test provider

2026-10-14 09:09:02 +08:00

verify-package-discovery.d.mts

fix(hopper): keep automated Linux setup off non-x86_64 hosts (#3422)

2026-10-23 02:39:05 +08:00

verify-package-discovery.mjs

fix(hopper): keep automated Linux setup off non-x86_64 hosts (#3422)

2026-10-23 02:39:05 +08:00

verify-package-environment.d.mts

fix(test): use direct Node launcher on macOS

2026-07-24 03:31:26 +00:00

verify-package-environment.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-package-evidence.mjs

refactor(adapters): split oversized provider workflows

2026-07-18 05:49:14 +00:00

verify-package-install.mjs

fix(verifiers): launch npm through Node on Windows (#4153)

2026-10-15 23:12:29 +08:00

verify-package-managed.mjs

test(managed): include shared dossier fixture in artifact inputs

2026-10-10 04:09:45 +08:00

verify-package-mcp.mjs

refactor(core): consolidate internal aliases and startup budget ownership

2026-10-23 00:11:27 +08:00

verify-package-pack.mjs

perf(mcp)!: default to compact input schema advertisements (#5975)

2026-10-22 00:17:11 +08:00

verify-package-platform.d.mts

fix(package-verifier): reject overview responses without a procedure count (#2936)

2026-10-14 03:06:53 +08:00

verify-package-platform.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-package-prompts.mjs

test(mcp): align completion checks with provider readiness

2026-10-12 18:44:02 +08:00

verify-package-setup-plan.d.mts

fix(ci): correlate ownership trace threads and preserve setup failures

2026-10-20 00:05:22 +08:00

verify-package-setup-plan.mjs

fix(ci): correlate ownership trace threads and preserve setup failures

2026-10-20 00:05:22 +08:00

verify-package-setup.d.mts

fix(verifiers): require positive ownership and restore cleanup coverage

2026-10-14 09:47:57 +08:00

verify-package-setup.mjs

fix(ci): correlate ownership trace threads and preserve setup failures

2026-10-20 00:05:22 +08:00

verify-package-unknown-provider.mjs

refactor(adapters): split oversized provider workflows

2026-07-18 05:49:14 +00:00

verify-package-update.mjs

test(package): join owned updater after registry fixture failure

2026-10-24 03:11:07 +08:00

verify-package.mjs

test(package): join owned updater after registry fixture failure

2026-10-24 03:11:07 +08:00

verify-packaged-ghidra-windows.mjs

perf(ghidra): aggregate binary overview at the provider boundary (#4754)

2026-10-17 10:44:24 +00:00

verify-packaged-wasm-artifact.mjs

fix(windows): retry owned runtime cleanup on sharing conflicts

2026-10-16 03:13:10 +08:00

verify-packed-bridge.d.mts

fix(verifiers): read packed bridge without extraction

2026-10-17 10:35:31 +00:00

verify-packed-bridge.mjs

fix(ci): isolate packed Python syntax checks from ambient imports (#6293)

2026-10-22 17:13:07 +08:00

verify-packet-capture.mjs

test(pcap): verify UTC metadata against authored capture records

2026-10-18 07:40:35 +08:00

verify-pcap.mjs

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

verify-published-package.mjs

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

verify-qlog-captures.mjs

feat(browser): inspect retained aioquic qlog JSON captures

2026-10-13 03:24:05 +00:00

verify-qwen-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-real-browser.mjs

fix(verify): compare matching browser source selections

2026-10-24 08:22:14 +08:00

verify-real-cutter.mjs

fix(verify): request command JSON for Cutter inspection

2026-10-18 07:34:08 +08:00

verify-real-electron.mjs

fix: bind Electron actions to the selected native window

2026-10-24 02:29:08 +08:00

verify-real-ghidra-6502.mjs

feat(ghidra): support raw NMOS 6502 analysis (#2079)

2026-10-13 21:13:01 +08:00

verify-real-ghidra-address-context.mjs

perf(ghidra): aggregate binary overview at the provider boundary (#4754)

2026-10-17 10:44:24 +00:00

verify-real-ghidra-assertions.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

verify-real-ghidra-com.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-decompile-timeout.mjs

feat(ghidra): bound one procedure's decompile without closing the session (#5662)

2026-10-24 07:42:50 +08:00

verify-real-ghidra-decompiler-failure.mjs

feat(ghidra): bound one procedure's decompile without closing the session (#5662)

2026-10-24 07:42:50 +08:00

verify-real-ghidra-dos.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-function.mjs

perf(ghidra): omit redundant raw results (#5355)

2026-10-20 05:14:33 +00:00

verify-real-ghidra-inventory.mjs

perf(ghidra): omit redundant raw results (#5355)

2026-10-20 05:14:33 +00:00

verify-real-ghidra-m68k.mjs

feat(ghidra): support raw big-endian m68k analysis (#4018)

2026-10-16 23:57:34 +08:00

verify-real-ghidra-mips-relocatable.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-mips-shared.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-mips.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-nativeaot.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-noreturn.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-ppc.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-raw.mjs

feat(firmware): attribute hardware MMIO peripheral memory regions in native disassembly (#5348)

2026-10-23 05:37:58 +08:00

verify-real-ghidra-riscv.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-swift.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-switch-assertions.mjs

fix(ghidra): recover evidenced switch cases and default targets (#579)

2026-10-05 22:54:17 +08:00

verify-real-ghidra-switch-controls.mjs

chore: migrate formatting to Oxfmt (#615)

2026-10-06 01:59:19 +08:00

verify-real-ghidra-switch.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-windows.mjs

perf(ghidra): omit redundant raw results (#5355)

2026-10-20 05:14:33 +00:00

verify-real-ghidra.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-hopper-deadlines.mjs

fix(hopper): own Mach-O preparation through cleanup retry

2026-10-21 06:12:09 +08:00

verify-real-hopper-fat.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-real-hopper-linux.mjs

test(hopper): repair Linux demo setup and native verification (#2638)

2026-10-13 14:39:18 +08:00

verify-real-hopper.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ida.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-kuna.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-reconstruction-readiness.mjs

perf(mcp)!: default to compact input schema advertisements (#5975)

2026-10-22 00:17:11 +08:00

verify-recorded-crash.mjs

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

verify-release-artifact.mjs

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

verify-release-checkpoint.mjs

fix(release): validate frozen checkpoint versions and breaking notes

2026-10-08 10:13:05 +00:00

verify-repository-skill.mjs

fix(ci): run the lockfile-pinned Skills CLI in package verification (#6235)

2026-10-21 21:19:45 -07:00

verify-signal-recording.mjs

fix(signals): reject missing sigrok channels

2026-10-23 19:07:45 +08:00

verify-solidity-metadata.mjs

feat(evm): inspect lossless Solidity terminal CBOR metadata (#2790)

2026-10-13 21:55:30 +08:00

verify-test-discovery.mjs

fix(verify): report final success only after resource cleanup

2026-10-09 04:12:49 +08:00

verify-test-temp-hygiene.mjs

fix(tests): preserve temporary fixture ownership

2026-10-18 11:34:44 +00:00

verify-wasm-artifact.mjs

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

verify-wasm-interface-comparison.mjs

feat(wasm): compare retained core-module interfaces (#2464)

2026-10-13 23:49:04 +08:00

verify-web-network-captures.mjs

feat(analysis-view): project an environment manifest from web network captures (#4954)

2026-10-19 07:07:37 +08:00

verify-website.py

docs(readme): add Roman Urdu edition (#6499)

2026-10-23 16:06:27 +08:00

verify-windows-native-artifact.mjs

fix(formats): preserve high bits in remaining magic-byte checks (#2384)

2026-10-13 20:54:37 +08:00

verify-windows-native-inspection.mjs

fix(windows): retain unpublished runtimes after cleanup failure

2026-10-15 08:16:22 +08:00

verify-windows-native.mjs

fix(ci): make Windows PowerShell observers cheap and cold-start tolerant (#6279)

2026-10-22 01:03:44 -07:00

verify-windows-package.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

website_i18n.py

docs(readme): add Roman Urdu edition (#6499)

2026-10-23 16:06:27 +08:00

website.py

feat(website): add contributors and complete the Greek edition (#3520)

2026-10-14 16:21:24 +00:00

windows-capabilities.mjs

feat(ghidra): define the Windows P0 admission boundary

2026-07-17 03:05:19 +09:00