Matt Van Horn 9fdb191d2c fix(audit): let a map or script read identify a native member ...

A package lists names without formats, so a PE called payload.js.map
took the map route and never reached a native probe. Its CodeView path
was lost, and with nothing counted as failed, native.pdb_path could read
not_applicable. A PE at a declared script or map target was lost the same
way, because declaration overrode the route.

Decide from the bytes the route already read, in the map route as in the
text route, and keep the listed kind for a promoted script target. Real
text and maps cost no extra read, so those allowances are unchanged.

2026-11-02 12:04:35 -08:00

..

.vitepress

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

assets

docs(readme): show a dark showcase image on dark themes (#6915)

2026-10-24 05:51:22 +08:00

design

fix(cli): describe one-shot timeouts for an invocation whose session has ended (#8535)

2026-11-01 08:57:32 -08:00

readme

docs(readme): align Linux x64 analysis prerequisites (#7997)

2026-10-29 13:44:07 +08:00

releases

docs: archive historical verification and release inventories (#7519)

2026-10-28 00:54:54 +08:00

specs

feat(environment): serve sorted creates, listed references and toggles (#7600)

2026-10-29 18:46:18 +08:00

verification

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

adb-device-analysis.md

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

agent-environments-quickstart.md

fix(environment)!: report recorded reads and target uncertainty (#7834)

2026-10-29 05:09:31 +08:00

agent-environments.md

feat(environment): serve sorted creates, listed references and toggles (#7600)

2026-10-29 18:46:18 +08:00

android-analysis.md

feat(android): trace callers of external DEX methods (#8154)

2026-10-31 01:07:18 +08:00

apk-signature.md

docs(apk): clarify rotated signer agreement (#7936)

2026-10-29 20:00:02 +08:00

apktool-resource-analysis.md

fix(apktool): read Apktool 2.9+ metadata in its line-oriented dialect (#7747)

2026-10-28 19:46:11 +08:00

apple-application-analysis.md

fix(apple): read flattened framework Info.plist from Resources (#8101)

2026-10-30 01:00:06 -07:00

apple-ips.md

fix(apple): keep the documented terminating process, parent pid and metadata members of IPS reports (#7079)

2026-10-25 13:56:51 +08:00

architecture.mermaid

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

binary-diagnostics.md

fix(native): retain ELF dynamic symbol visibility in export evidence and views (#8617)

2026-11-02 16:47:37 +08:00

browser-observation.md

fix(browser): preserve DOM length units in captures and comparisons (#7971)

2026-10-29 11:27:01 +08:00

browser-scenario-contract.md

fix(browser): disclose opaque redirect coverage gaps (#7943)

2026-10-29 07:57:00 +08:00

bun-standalone.md

feat(artifacts): inspect and extract Bun standalone module graphs (#6998)

2026-10-29 22:31:50 +08:00

capability-composition.md

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

ci-analysis.md

docs(ci): add a repeatable static analysis example (#6496)

2026-10-23 23:42:58 +09:00

cli.md

Merge remote-tracking branch 'upstream/main' into fix/release-exposure-audit

2026-11-02 01:28:14 -08:00

client-configuration.md

docs(setup): restore target and Hopper launch settings (#7902)

2026-10-29 23:03:02 +08:00

client-verification.md

fix(setup): register explicit MCP runtimes and preserve launcher identity

2026-10-26 02:33:31 +08:00

desktop-applications.md

fix(desktop): charge retained rows at their measured representation (#8105)

2026-10-30 01:00:28 -07:00

devicetree.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

dotnet-bundles.md

feat(artifacts): inspect and extract .NET single-file bundles (#3787)

2026-10-29 20:06:58 +08:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

fix(electron): preserve runtime rejection and exception policies (#8542)

2026-11-02 01:15:08 +08:00

elf-notes.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

erlang-beam.md

test(erlang): cover lambdas names filter and chunks miss in BEAM views (#6973)

2026-10-24 17:39:57 +08:00

error-contract.schema.json

fix(mcp): name the close_binary retry for retained cleanup (#8329)

2026-10-31 11:12:30 -07:00

esp-flash-image.md

feat(artifacts): inventory and extract ESP flash layouts (#8228)

2026-10-31 15:24:32 +08:00

esp-image.md

feat(artifacts): inventory and extract ESP flash layouts (#8228)

2026-10-31 15:24:32 +08:00

evm-bytecode.md

fix(analysis-view): keep inferred confidence on views of inferred Evidence (#8099)

2026-10-30 00:59:53 -07:00

firmware-analysis.md

feat(artifacts): inventory and extract UF2 and DfuSe firmware containers (#8230)

2026-10-31 16:27:00 +08:00

fit-images.md

feat(artifacts): inventory and extract U-Boot FIT images (#7771)

2026-10-29 13:33:26 +08:00

flutter-analysis.md

fix(flutter): qualify unsupported unified snapshot profiles

2026-10-24 04:28:54 +08:00

frida-instrumentation.md

fix!: retain Frida observations through shared finalization

2026-10-24 01:47:31 +08:00

ghidra-dol.md

docs(ghidra): fix DOL guide PowerPC link (#7857)

2026-10-29 04:57:59 +08:00

ghidra-dos.md

fix(ghidra): admit newer 12.x releases as compatible builds (#6924)

2026-10-27 03:49:12 +08:00

ghidra-mips.md

test(ghidra): expect carved MIPS copies to be refused at target opening (#8227)

2026-10-31 15:24:17 +08:00

ghidra-nativeaot.md

fix(nativeaot): charge only examined candidate table entries

2026-10-24 04:23:56 +08:00

ghidra-ppc.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

ghidra-provider.md

fix(ghidra): retain relocation symbol observations (#8531)

2026-11-01 23:53:56 +08:00

ghidra-psp.md

test(ghidra): expect carved MIPS copies to be refused at target opening (#8227)

2026-10-31 15:24:17 +08:00

ghidra-riscv.md

feat(ghidra): admit RISC-V ilp32 ELF with a derived calling convention (#8229)

2026-10-31 15:48:46 +08:00

go-binaries.md

merge: consolidate upstream ownership and coverage fixes

2026-10-24 04:43:33 +08:00

godot-pck.md

feat(artifacts): read Godot 3 PCK version 1 archives (#7781)

2026-10-28 19:43:43 +08:00

gpu-code-objects.md

fix(gpu): own CCOB boundaries and payload representations

2026-10-24 02:34:35 +08:00

harmony-analysis.md

fix(harmony): classify exact manifest names once (#7206)

2026-10-27 13:30:24 +08:00

hex-records.md

feat(artifacts): inventory and extract Intel HEX and Motorola S-record regions (#7136)

2026-10-28 12:35:55 +08:00

http3-capture-lab.md

fix(deps): patch fast-uri, qs and HTTP/3 certifi (#7704)

2026-10-28 03:34:36 +00:00

ida-provider.md

fix(discovery): carry provider repair instructions into capability discovery (#8532)

2026-11-01 08:57:11 -08:00

il2cpp-metadata.md

fix(il2cpp): validate structural record extents (#7861)

2026-10-29 01:55:47 +08:00

index.md

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

ines-containers.md

feat(artifacts): inspect classic iNES container regions (#2816)

2026-10-31 15:49:16 +08:00

installation.md

fix(setup): refuse Hopper on macOS below the release's minimum (#8548)

2026-11-02 00:05:30 -08:00

javascript-application-graph.md

fix(javascript): separate endpoint syntax correspondence from target identity

2026-10-24 03:59:44 +08:00

javascript-application-workflows.md

feat(javascript): page retained feature traces through analysis views (#8522)

2026-11-01 08:56:05 -08:00

javascript-artifact-reconstruction.md

fix(javascript): report SVG script references and skipped bodies (#8627)

2026-11-02 15:55:56 +08:00

javascript-recovery.md

fix(javascript): preserve recovery acquisition and cancellation failures

2026-10-24 03:11:07 +08:00

javascript-route-inventory.md

feat(evidence): read selected complete records without the whole bundle (#8528)

2026-11-01 08:56:58 -08:00

javascript-runtime-observation.md

fix(inspector): retain captures through authorization cleanup failures

2026-10-24 03:16:30 +08:00

javascript-runtime-reconciliation.md

fix(javascript): distinguish bundled script locations (#7909)

2026-10-29 07:56:06 +08:00

jeb-analysis.md

fix(jeb)!: preserve engine refusal diagnostics

2026-10-27 06:22:10 +08:00

kernel-modules.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

kuna-provider.md

fix(native): find procedures by the secondary names exact lookup accepts (#8520)

2026-11-01 08:53:29 -08:00

managed-code-analysis.md

feat(dotnet): expose field constant defaults (#8015)

2026-10-31 00:10:36 +08:00

mcp-contracts.md

feat(native): deliver batch decompile as a retained summary (#8631)

2026-11-02 00:50:42 -08:00

mcp-prompts.md

feat(guidance): distinguish focused matches from broad parent sections (#8305)

2026-10-31 11:11:05 -07:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

model-artifacts.md

fix(model): preserve uncertainty across released GGUF layouts

2026-10-24 02:00:10 +08:00

native-function-matching.md

feat(native): make function matching allowance configurable (#7159)

2026-10-26 02:22:32 +08:00

native-investigation.md

feat(native): deliver batch decompile as a retained summary (#8631)

2026-11-02 00:50:42 -08:00

node-sea.md

fix(artifacts): compare Node SEA member declarations

2026-10-27 06:06:27 +08:00

packet-captures.md

fix(captures): preserve canonical TShark alias fields

2026-10-23 19:07:46 +08:00

pcap-analysis.md

fix(pcap): redact HTTP credentials in failed capture diagnostics (#7871)

2026-10-28 18:14:22 +00:00

pe-certificates.md

fix(certificates)!: disclose undecoded unsigned attributes (#7920)

2026-10-29 08:56:07 +08:00

pe-imports.md

fix(pe): share header identity across native metadata readers

2026-10-24 16:08:26 +08:00

pe-load-config.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

process-capture.md

perf(process): reuse a verified Darwin ownership helper across processes (#8318)

2026-10-31 11:12:02 -07:00

python-packaged-applications.md

fix(artifacts): retain raw archive keys across entry projections

2026-10-25 03:30:22 +08:00

python-pyc.md

feat(python): query selected pyc code-object facts (#6928)

2026-10-24 10:23:06 +08:00

raw-binary.md

docs: correct the raw ARM example and document a Cortex-M language override (#7483)

2026-10-30 22:28:06 +08:00

reconstruction-coverage.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction): qualify original process evidence at its owner

2026-10-24 06:13:53 +08:00

reconstruction-readiness.md

refactor(verification): separate readiness evidence scopes

2026-10-24 11:31:39 +08:00

recorded-crashes.md

feat(apple): inspect IPS crash reports (#6511)

2026-10-24 16:02:59 +08:00

release-exposure.md

fix(audit): let a map or script read identify a native member

2026-11-02 12:04:35 -08:00

releasing.md

feat(plugins): make Claude Code and Codex installs self-contained (#7514)

2026-10-27 17:13:17 +00:00

reverse-engineering-tools.md

docs(cutter): explain bridge descriptor discovery configuration

2026-10-24 17:21:08 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

signal-recordings.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

sqlite-databases.md

test(sqlite): preserve worker failures through cleanup retry

2026-10-24 12:34:10 +08:00

testing-lanes.md

docs: clarify test audits and organize verification lanes

2026-11-02 02:21:40 +08:00

testing.md

fix(process): re-read unreadable tokens before signaling and name the process (#8553)

2026-11-02 00:21:23 -08:00

tool-design.md

docs(providers): verify prerequisite recovery and sibling failures

2026-11-01 21:14:27 +08:00

uf2-dfuse.md

feat(artifacts): inventory and extract UF2 and DfuSe firmware containers (#8230)

2026-10-31 16:27:00 +08:00

uimage.md

fix(artifacts): name every U-Boot uImage type in the pinned image.h (#8007)

2026-10-29 15:13:37 +08:00

unityfs.md

feat(artifacts): read UnityFS AssetBundle containers (#7699)

2026-10-28 16:47:39 +08:00

user-visible-errors.csv

fix(cli): describe one-shot timeouts for an invocation whose session has ended (#8535)

2026-11-01 08:57:32 -08:00

wasm-artifacts.md

feat(evidence): read selected complete records without the whole bundle (#8528)

2026-11-01 08:56:58 -08:00

web-network-captures.md

fix(captures): admit browser-serialized HAR request URLs (#8112)

2026-10-30 01:03:35 -07:00

web-runtime.md

fix(browser): retain truthful cleanup facts and document request ownership

2026-10-24 03:59:44 +08:00

web-source-location.md

fix(source-maps): resolve empty sourceRoot sources against the map URL (#8107)

2026-10-30 01:00:41 -07:00

website-module-trace.md

fix(analysis): preserve artifact and selection error ownership

2026-10-24 22:54:05 +08:00

website-script-export.md

docs: correct setup capture and recovery boundary guidance

2026-10-24 02:40:21 +08:00

windows-ghidra-p0.md

fix(discovery): carry provider repair instructions into capability discovery (#8532)

2026-11-01 08:57:11 -08:00