RRFZandmorluto 8c83886891 fix(pe): report exhausted certificate decoder allowances as resource limits (#7881) ...

* fix(pe): report exhausted certificate decoder allowances as resource limits

A PKCS#7 payload that exhausted the fixed 64 KiB decoded-text or 16,384-value ASN.1 allowance was refused as malformed input with advice to correct request fields. Keep the allowance and limit on the decoder failure and report it as a nonretryable resource_constraint with fixed-allowance recovery.

Fixes #7531

* test(pe): cover certificate allowances through MCP

---------

Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>

2026-10-29 07:36:56 +08:00

..

.vitepress

docs(environments): explain building RL environments with REA

2026-10-26 00:16:52 +08:00

assets

docs(readme): show a dark showcase image on dark themes (#6915)

2026-10-24 05:51:22 +08:00

design

feat(native): make function matching allowance configurable (#7159)

2026-10-26 02:22:32 +08:00

readme

docs: celebrate 400,000 GitHub stars 🎉 (#7801)

2026-10-28 22:12:43 +08:00

releases

docs: archive historical verification and release inventories (#7519)

2026-10-28 00:54:54 +08:00

specs

fix(environment)!: report recorded reads and target uncertainty (#7834)

2026-10-29 05:09:31 +08:00

verification

docs: archive historical verification and release inventories (#7519)

2026-10-28 00:54:54 +08:00

adb-device-analysis.md

fix(adb): own numeric declaration validation and diagnostics

2026-10-24 06:34:33 +08:00

agent-environments-quickstart.md

fix(environment)!: report recorded reads and target uncertainty (#7834)

2026-10-29 05:09:31 +08:00

agent-environments.md

fix(environment)!: report recorded reads and target uncertainty (#7834)

2026-10-29 05:09:31 +08:00

android-analysis.md

fix(android): preserve manifest component spelling (#7818)

2026-10-29 01:10:45 +08:00

apk-signature.md

fix(apk): classify fixed inspection allowances as nonretryable (#7784)

2026-10-28 20:13:58 +08:00

apktool-resource-analysis.md

fix(apktool): read Apktool 2.9+ metadata in its line-oriented dialect (#7747)

2026-10-28 19:46:11 +08:00

apple-application-analysis.md

fix(apple): keep dyld candidates inside the analyzed root on Windows (#6955)

2026-10-24 16:10:18 +08:00

apple-ips.md

fix(apple): keep the documented terminating process, parent pid and metadata members of IPS reports (#7079)

2026-10-25 13:56:51 +08:00

architecture.mermaid

refactor(analysis): consolidate selection ownership

2026-10-27 13:21:35 +08:00

binary-diagnostics.md

feat(binary-layout): admit ELF32 i386, ARM and MIPS layout profiles (#7052)

2026-10-25 14:18:44 +08:00

browser-observation.md

fix(browser): retain prior-hop response facts in session timelines (#7807)

2026-10-29 02:04:15 +08:00

browser-scenario-contract.md

fix(browser): save from gzip, deflate and cached responses within a bound (#7361)

2026-10-28 05:08:27 +08:00

ci-analysis.md

docs(ci): add a repeatable static analysis example (#6496)

2026-10-23 23:42:58 +09:00

cli.md

feat(artifacts): compare inventories from Evidence sources (#7869)

2026-10-29 03:12:03 +08:00

client-configuration.md

fix(setup)!: bind managed registrations to selected installation

2026-10-28 11:34:28 +00:00

client-verification.md

fix(setup): register explicit MCP runtimes and preserve launcher identity

2026-10-26 02:33:31 +08:00

desktop-applications.md

docs(desktop): name the get_evidence_bundle tool in the MCP section (#7266)

2026-10-27 04:56:17 +08:00

devicetree.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

docs(settings): explain runtime design and provider recovery

2026-10-25 09:56:11 +08:00

elf-notes.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

erlang-beam.md

test(erlang): cover lambdas names filter and chunks miss in BEAM views (#6973)

2026-10-24 17:39:57 +08:00

error-contract.schema.json

fix(cli): recognize integrity failures with partial observations (#7836)

2026-10-29 01:55:57 +08:00

esp-image.md

feat(artifacts): inventory and extract ESP32 firmware images (#7498)

2026-10-28 23:18:22 +08:00

evm-bytecode.md

fix(evm): preserve reply allowance failures and selected limits

2026-10-24 02:40:21 +08:00

firmware-analysis.md

fix(artifacts): split U-Boot script uImages on their size table (#7805)

2026-10-29 01:57:09 +08:00

flutter-analysis.md

fix(flutter): qualify unsupported unified snapshot profiles

2026-10-24 04:28:54 +08:00

frida-instrumentation.md

fix!: retain Frida observations through shared finalization

2026-10-24 01:47:31 +08:00

ghidra-dol.md

docs(ghidra): fix DOL guide PowerPC link (#7857)

2026-10-29 04:57:59 +08:00

ghidra-dos.md

fix(ghidra): admit newer 12.x releases as compatible builds (#6924)

2026-10-27 03:49:12 +08:00

ghidra-mips.md

fix(ghidra): admit recordless MIPS-I legacy targets (#7014)

2026-10-25 01:16:51 +08:00

ghidra-nativeaot.md

fix(nativeaot): charge only examined candidate table entries

2026-10-24 04:23:56 +08:00

ghidra-ppc.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

ghidra-provider.md

fix(ghidra): scope rejected-input diagnostics to their request (#7140)

2026-10-25 22:37:32 +08:00

ghidra-psp.md

feat(ghidra): admit bounded PSP ELF through installed Allegrex (#1599)

2026-10-11 19:47:33 +08:00

ghidra-riscv.md

feat(ghidra): support raw NMOS 6502 analysis (#2079)

2026-10-13 21:13:01 +08:00

go-binaries.md

merge: consolidate upstream ownership and coverage fixes

2026-10-24 04:43:33 +08:00

godot-pck.md

feat(artifacts): read Godot 3 PCK version 1 archives (#7781)

2026-10-28 19:43:43 +08:00

gpu-code-objects.md

fix(gpu): own CCOB boundaries and payload representations

2026-10-24 02:34:35 +08:00

harmony-analysis.md

fix(harmony): classify exact manifest names once (#7206)

2026-10-27 13:30:24 +08:00

hex-records.md

feat(artifacts): inventory and extract Intel HEX and Motorola S-record regions (#7136)

2026-10-28 12:35:55 +08:00

http3-capture-lab.md

fix(deps): patch fast-uri, qs and HTTP/3 certifi (#7704)

2026-10-28 03:34:36 +00:00

ida-provider.md

chore: archive analysis efficiency experiments

2026-10-27 14:10:07 +08:00

il2cpp-metadata.md

fix(il2cpp): validate structural record extents (#7861)

2026-10-29 01:55:47 +08:00

index.md

feat(artifacts): inventory and extract ESP32 firmware images (#7498)

2026-10-28 23:18:22 +08:00

installation.md

fix(setup): preserve specific skill path recovery (#7791)

2026-10-28 20:49:05 +08:00

javascript-application-graph.md

fix(javascript): separate endpoint syntax correspondence from target identity

2026-10-24 03:59:44 +08:00

javascript-application-workflows.md

feat(javascript): discover semantic call literals in feature traces (#7840)

2026-10-29 01:25:23 +08:00

javascript-artifact-reconstruction.md

fix(javascript): resolve Vite build-output preload dependencies (#7745)

2026-10-28 19:46:45 +08:00

javascript-recovery.md

fix(javascript): preserve recovery acquisition and cancellation failures

2026-10-24 03:11:07 +08:00

javascript-route-inventory.md

feat(web): page retained bundle endpoint observations and inferences (#7259)

2026-10-27 01:37:39 +08:00

javascript-runtime-observation.md

fix(inspector): retain captures through authorization cleanup failures

2026-10-24 03:16:30 +08:00

javascript-runtime-reconciliation.md

fix(browser): preserve unknown script ownership through reconciliation

2026-10-24 04:23:56 +08:00

jeb-analysis.md

fix(jeb)!: preserve engine refusal diagnostics

2026-10-27 06:22:10 +08:00

kernel-modules.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

kuna-provider.md

fix(kuna): bind cache exports to their producing inputs

2026-10-27 05:23:53 +08:00

managed-code-analysis.md

fix(managed): retain local signature comparison coverage

2026-10-27 08:46:31 +08:00

mcp-contracts.md

fix(mcp): guide oversized unknown recovery (#7876)

2026-10-29 05:07:35 +08:00

mcp-prompts.md

feat(workflows): expose guided prompts through CLI and MCP (#6995)

2026-10-28 14:12:39 +08:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

model-artifacts.md

fix(model): preserve uncertainty across released GGUF layouts

2026-10-24 02:00:10 +08:00

native-function-matching.md

feat(native): make function matching allowance configurable (#7159)

2026-10-26 02:22:32 +08:00

native-investigation.md

fix(ghidra)!: distinguish unlisted instruction addresses (#7823)

2026-10-29 04:59:04 +08:00

node-sea.md

fix(artifacts): compare Node SEA member declarations

2026-10-27 06:06:27 +08:00

packet-captures.md

fix(captures): preserve canonical TShark alias fields

2026-10-23 19:07:46 +08:00

pcap-analysis.md

fix(pcap): redact HTTP credentials in failed capture diagnostics (#7871)

2026-10-28 18:14:22 +00:00

pe-certificates.md

fix(pe): report exhausted certificate decoder allowances as resource limits (#7881)

2026-10-29 07:36:56 +08:00

pe-imports.md

fix(pe): share header identity across native metadata readers

2026-10-24 16:08:26 +08:00

pe-load-config.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

process-capture.md

fix(process)!: reject unsupported one-column terminals (#7848)

2026-10-29 01:23:02 +08:00

python-packaged-applications.md

fix(artifacts): retain raw archive keys across entry projections

2026-10-25 03:30:22 +08:00

python-pyc.md

feat(python): query selected pyc code-object facts (#6928)

2026-10-24 10:23:06 +08:00

raw-binary.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

reconstruction-coverage.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction): qualify original process evidence at its owner

2026-10-24 06:13:53 +08:00

reconstruction-readiness.md

refactor(verification): separate readiness evidence scopes

2026-10-24 11:31:39 +08:00

recorded-crashes.md

feat(apple): inspect IPS crash reports (#6511)

2026-10-24 16:02:59 +08:00

releasing.md

feat(plugins): make Claude Code and Codex installs self-contained (#7514)

2026-10-27 17:13:17 +00:00

reverse-engineering-tools.md

docs(cutter): explain bridge descriptor discovery configuration

2026-10-24 17:21:08 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

signal-recordings.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

sqlite-databases.md

test(sqlite): preserve worker failures through cleanup retry

2026-10-24 12:34:10 +08:00

testing.md

feat(artifacts): inventory and extract ESP32 firmware images (#7498)

2026-10-28 23:18:22 +08:00

tool-design.md

docs: clarify ownership and cleanup review guidance

2026-10-25 06:51:31 +08:00

uimage.md

fix(artifacts): split U-Boot script uImages on their size table (#7805)

2026-10-29 01:57:09 +08:00

unityfs.md

feat(artifacts): read UnityFS AssetBundle containers (#7699)

2026-10-28 16:47:39 +08:00

user-visible-errors.csv

docs(errors): align byte entropy recovery catalog (#7884)

2026-10-29 03:03:04 +08:00

wasm-artifacts.md

fix(wasm): retain core facts with invalid custom names (#7822)

2026-10-29 05:08:41 +08:00

web-network-captures.md

fix(environment)!: report recorded reads and target uncertainty (#7834)

2026-10-29 05:09:31 +08:00

web-runtime.md

fix(browser): retain truthful cleanup facts and document request ownership

2026-10-24 03:59:44 +08:00

web-source-location.md

fix(source-map): clarify policy and evidence provenance (#7828)

2026-10-29 01:29:59 +08:00

website-module-trace.md

fix(analysis): preserve artifact and selection error ownership

2026-10-24 22:54:05 +08:00

website-script-export.md

docs: correct setup capture and recovery boundary guidance

2026-10-24 02:40:21 +08:00

windows-ghidra-p0.md

fix(ghidra): admit newer 12.x releases as compatible builds (#6924)

2026-10-27 03:49:12 +08:00