Matt Van Horn a250696cac fix(audit): charge sibling map reads to the map count ...

Every generic .map beside a selected file got a full 1 MiB read and a
parse, with no cumulative bound, so the 4,096-entry listing allowed about
4 GiB of reading for one small selection.

Move the slot rule into chargeMapRead, which examineMap and sibling
classification now share. Past the count a sibling reads only the header:
a linker map is still identified, and one that may be a source map stays
a skipped companion.

2026-11-01 21:09:46 -08:00

..

adb

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

android

feat(android): trace callers of external DEX methods (#8154)

2026-10-31 01:07:18 +08:00

apkSignature

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

apktool

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

application

fix(audit): settle fuses only on an identified host, and read Bun and HTML maps

2026-11-01 20:15:06 -08:00

artifacts

fix(audit): charge sibling map reads to the map count

2026-11-01 21:09:46 -08:00

browser

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

captures

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

cli

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

composition

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

compression

fix(gpu): distinguish host descriptor failures from invalid targets

2026-10-24 00:27:57 +08:00

config

fix(ci): consolidate shared timer limit export

2026-10-31 01:16:19 +08:00

contracts

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

cutter

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

domain

fix(audit): settle fuses only on an identified host, and read Bun and HTML maps

2026-11-01 20:15:06 -08:00

dotnet

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

electron

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

erlang

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

evm

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

filesystem

feat(artifacts): inspect classic iNES container regions (#2816)

2026-10-31 15:49:16 +08:00

firmware

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

flutter

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

frida

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

gdb

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

ghidra

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

go

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

gpu

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

hopper

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

ida

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

il2cpp

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

inspector

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

javascript

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

jeb

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

kuna

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

main

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

model

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

native

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

objdump

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

pcap

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

process

perf(process): reuse a verified Darwin ownership helper across processes (#8318)

2026-10-31 11:12:02 -07:00

providers

refactor(analysis): move client cleanup to application

2026-10-27 13:49:44 +08:00

python

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

reference

fix(input)!: classify unresolvable source paths (#7847)

2026-10-29 01:52:34 +08:00

rizin

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

rust

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

server

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

signals

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

sqlite

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

wasm

fix: report provider admission failures as typed codes (#8066)

2026-10-30 06:48:01 +08:00

windows

fix(windows): keep polling owned process output after a failed poll (#8163)

2026-10-31 15:23:13 +08:00

catalogIdentity.ts

feat(workflows): expose guided prompts through CLI and MCP (#6995)

2026-10-28 14:12:39 +08:00

cli.ts

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

cliBrowserScenarioCommands.ts

refactor(cli): retain typed analysis outcomes through delivery

2026-10-27 09:16:02 +08:00

cliBuiltinArguments.ts

fix(cli): prevent mcp discovery from registering clients (#7919)

2026-10-29 08:57:38 +08:00

cliBundleResource.test.ts

…

cliCommandNames.ts

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

cliConfiguration.ts

feat(cli): report version and runtime with an explicit output format (#6530)

2026-10-24 00:06:03 +08:00

cliEvidenceCommands.ts

fix(cli): reject empty Evidence file arguments (#7988)

2026-10-29 12:34:46 +08:00

cliHostInputs.test.ts

…

cliJsonInput.ts

refactor(cli): remove obsolete JSON read error mode

2026-10-27 12:42:25 +08:00

cliJsonPaths.test.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

cliLogging.ts

…

cliObservationOptions.test.ts

fix(cli): reject empty observation duration selections (#7710)

2026-10-28 12:57:14 +08:00

cliObservationOptions.ts

fix(cli): reject empty observation duration selections (#7710)

2026-10-28 12:57:14 +08:00

cliOutput.ts

fix(cli): prevent mcp discovery from registering clients (#7919)

2026-10-29 08:57:38 +08:00

config.test.ts

fix(mcp)!: bound validation work before tool dispatch (#7905)

2026-10-29 05:56:38 +00:00

doctorRuntime.test.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

doctorRuntime.ts

fix(setup): preserve and validate selected JEB endpoints

2026-10-27 07:17:10 +08:00

generatedPackageMetadata.ts

refactor(evidence): unify retained inputs across domains (#8299)

2026-10-31 14:45:21 +00:00

homeDirectory.test.ts

…

identity.ts

…

logger.ts

…

main.ts

fix(mcp)!: require allowed hosts for non-loopback HTTP binds (#7172)

2026-10-26 22:55:10 +08:00

mcpDoctor.ts

fix(cli): correct completion options and setup guidance (#7851)

2026-10-29 01:28:04 +08:00

mcpDoctorOptions.ts

fix(cli): correct completion options and setup guidance (#7851)

2026-10-29 01:28:04 +08:00

mcpStartupPolicy.test.ts

fix(verification): keep runtime packaging and boundary fixtures complete

2026-10-26 16:46:53 +08:00

mcpStartupPolicy.ts

refactor(analysis): consolidate selection ownership

2026-10-27 13:21:35 +08:00

nativeDeadlineFlags.test.ts

…

recordedCatalogDigests.ts

feat(mcp): support compact output schema advertisements (#7218)

2026-10-26 17:59:51 +08:00

recordedMcpCatalog.ts

…

serverIdentity.ts

…

setupEnvironment.test.ts

fix(setup)!: bind managed registrations to selected installation

2026-10-28 11:34:28 +00:00