* refactor(analysis): centralize resource budgets and recovery facts * feat(analysis): expose ASAR and Ghidra runtime admission controls * feat(artifacts): expose reader admission and preserve limited recognition * feat(javascript): expose recoverable semantic precision budgets * feat(web): add recoverable source-map budgets and compact retained views * feat(web): make historical capture decoding budgets recoverable * fix(desktop): enforce selected view policies across capture and export * feat(runtime): make Frida and LLDB retention budgets selectable * feat(native): expose diagnostic budgets and preserve exhaustion causes * feat(managed): expose recoverable snapshot and representation budgets * feat(metadata): make Go and Rust inspection budgets recoverable * feat(wasm): expose representation and producer admissions * feat(evm): expose per-call worker resource budgets * feat(android): make resource and string-pool omissions recoverable * feat(producers): expose command and recorded-capture budgets * docs(analysis): record recovery contracts and integrated validation * fix(docs): link calibration oracle from published verification pages * fix(docs): restore desktop task anchors and receipt links * test(analysis): align fixtures with selectable budget contracts * fix(analysis): remove source-location projector dependency cycle * test(analysis): refresh budget recovery and verifier regressions * test(analysis): preserve format and publication recovery expectations * test(windows): align conformance with owned runtime admission * fix(desktop): preserve selected alias kinds in exported state * test(analysis): align provider fixtures with recoverable budgets * test(desktop): validate emitted alias metadata structurally * fix(ghidra): classify bounded Windows endpoint refusals * test(cli): assert selectable artifact admission recovery * fix(cli): preserve capture provenance in environment builds
1.5 KiB
Implementation plan
Use the existing named domain contracts and runtime settings owner. Prefer per-call selection or cohesive resource policies where they express analyst intent. Extend the runtime registry for ASAR listing admission, which already flows through the shared archive admission owner.
Implement independent owner slices: kernel metadata; GDB/Ghidra; desktop and generated Python; Apktool; JavaScript precision; source maps; historical captures; artifacts/managed/Rust; live capture; and producer limits. Coordinate shared schema/configuration files centrally and review cross-slice changes before broad checks.
Remove superseded literals, representations and misleading recovery rather than adding downstream prose repairs. Use the repository's Result/error algebra, existing process supervision, and existing CLI/MCP registration paths.
Validate focused boundaries first, then build, type/lint checks and generated documentation consistency. Document unavailable native/provider lanes. No performance claim or benchmark is required for correctness and policy ownership.
For default calibration, compare representative completed tasks, including recovery calls and complete replies. Record artifact identity, an independent coverage oracle, estimated tokens, elapsed/CPU time and sampled process-family memory. Separate artifact admission from delivery size; do not raise defaults merely to make a large response fit. Keep unmeasured defaults explicitly provisional rather than presenting inherited numbers as optimal.