Edgar ArakelyanandClaude Fable 5.1 b76f354d76 fix(mcp): classify loopback from the bound address and keep startup failures out of onerror ...

Addresses the third automated review round: loopback is classified from the
address the listener bound with the configured name added to the Host and
Origin allowlist; scoped IPv6 literals are refused before binding and a URL
that cannot be formed closes the listener; listener errors reach onerror only
after a successful bind; the MCP runtime keeps its factory owner as the single
owner of instance cleanup through `closeInstance: false`.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

2026-10-18 09:18:08 -07:00

..

.vitepress

feat(kuna): serve procedures, pseudocode and assembly from Kuna exports (#3854)

2026-10-15 00:53:26 -07:00

assets

docs: keep license sections text-only

2026-10-10 00:09:46 +08:00

readme

fix(ci): handle cache eviction and composed cleanup assertions (#4824)

2026-10-18 01:08:14 +08:00

releases

chore(main): release rea-agents 6.5.0 (#1693)

2026-10-14 20:31:45 +08:00

specs

fix(mcp): classify loopback from the bound address and keep startup failures out of onerror

2026-10-18 09:18:08 -07:00

verification

fix(electron): delegate once dispatch to the active runtime (#4605)

2026-10-17 06:38:13 +08:00

adb-device-analysis.md

fix(adb): preserve display-scoped window focus declarations

2026-10-17 13:40:09 +08:00

android-analysis.md

fix(android): preserve typed JVM memory failures during loading

2026-10-18 00:48:12 +08:00

apktool-resource-analysis.md

feat(apktool): share one APK resource decode across selected locale tables (#4777) (#4804)

2026-10-18 03:57:17 +08:00

apple-application-analysis.md

fix(mobile): classify authenticated file occurrences as components

2026-10-17 19:58:18 +08:00

architecture.mermaid

feat(mcp): serve the MCP server over streamable HTTP

2026-10-17 21:05:10 -07:00

binary-diagnostics.md

fix(ghidra): retain scoped failures through process finalization

2026-10-16 07:25:23 +08:00

browser-observation.md

fix(browser): parse complete COOP and COEP structured items

2026-10-17 13:26:13 +08:00

browser-scenario-contract.md

docs(browser): clarify scenario cleanup after termination

2026-10-17 13:49:20 +08:00

cli.md

fix(mcp): harden the streamable HTTP listener's session replacement and shutdown

2026-10-18 08:14:01 -07:00

client-configuration.md

fix(setup): preserve configuration identity and inspection uncertainty

2026-10-17 00:44:02 +08:00

client-verification.md

fix(contracts): preserve array guidance across MCP schema profiles

2026-10-15 01:41:31 +08:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

fix(browser): share DOM snapshot admission

2026-10-17 15:59:57 +08:00

error-contract.schema.json

feat(evm): inspect offline bytecode interfaces through EVMole (#1051)

2026-10-08 15:32:05 +08:00

evm-bytecode.md

feat(evm): inspect lossless Solidity terminal CBOR metadata (#2790)

2026-10-13 21:55:30 +08:00

firmware-analysis.md

fix(firmware): preserve snapshot input failures and descriptor ownership

2026-10-17 08:53:56 +08:00

flutter-analysis.md

fix(flutter): reject ambiguous ELF mappings and bound note reads (#2334)

2026-10-13 22:13:22 +08:00

frida-instrumentation.md

fix(frida): drain admitted operations and honor queued cancellation (#2305)

2026-10-14 02:56:00 +08:00

ghidra-dos.md

fix(ghidra): compare final DOS relocation windows

2026-10-17 19:30:11 +08:00

ghidra-mips.md

fix(ghidra): reconcile GNU MIPS ABI declarations

2026-10-14 14:47:26 +08:00

ghidra-nativeaot.md

fix(ghidra): use resolved type addresses for NativeAOT metadata

2026-10-15 21:05:33 +08:00

ghidra-ppc.md

feat(ghidra): admit 32-bit big-endian PowerPC ELF (#1747)

2026-10-14 06:35:55 +08:00

ghidra-provider.md

perf(ghidra): aggregate binary overview at the provider boundary (#4754)

2026-10-17 10:44:24 +00:00

ghidra-psp.md

feat(ghidra): admit bounded PSP ELF through installed Allegrex (#1599)

2026-10-11 19:47:33 +08:00

ghidra-riscv.md

feat(ghidra): support raw NMOS 6502 analysis (#2079)

2026-10-13 21:13:01 +08:00

go-binaries.md

fix(artifacts): preserve input size refusals and recovery

2026-10-17 08:45:15 +08:00

harmony-analysis.md

fix(mobile): derive runtime hints from classified components

2026-10-17 20:02:26 +08:00

http3-capture-lab.md

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

ida-provider.md

fix(ida): refuse universal Mach-O targets in attached profiles (#4765)

2026-10-17 04:27:46 -07:00

index.md

feat(kuna): serve procedures, pseudocode and assembly from Kuna exports (#3854)

2026-10-15 00:53:26 -07:00

installation.md

fix(setup): preserve the selected destination during configuration publication

2026-10-18 07:06:15 +08:00

javascript-application-graph.md

fix(javascript): retain unresolved network targets with provenance

2026-10-16 08:14:52 +08:00

javascript-application-workflows.md

fix(javascript): preserve unresolved version relationships

2026-10-17 12:51:04 +08:00

javascript-artifact-reconstruction.md

fix(javascript): bound semantic unknown retention at projection

2026-10-17 21:57:31 +08:00

javascript-recovery.md

fix(javascript): report oversized recovery inputs as file-size limits (#4757)

2026-10-17 04:26:39 -07:00

javascript-runtime-observation.md

fix(javascript): report malformed runtime context events as excluded (#4755)

2026-10-17 04:26:25 -07:00

javascript-runtime-reconciliation.md

fix(javascript): preserve mapped runtime digest disagreements

2026-10-15 17:04:49 +08:00

jeb-analysis.md

fix(jeb): cache parsed metadata independently of optional version

2026-10-17 06:03:51 +08:00

kuna-provider.md

fix(kuna): name the setting that owns a timed-out Kuna run (#4343)

2026-10-17 00:38:16 -07:00

managed-code-analysis.md

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00

mcp-contracts.md

fix(mcp): classify loopback from the bound address and keep startup failures out of onerror

2026-10-18 09:18:08 -07:00

mcp-prompts.md

docs(mcp): describe the 100-value completion reply limit (#4086)

2026-10-15 05:20:50 -07:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

native-investigation.md

fix(native): preserve resolved plist selection intent

2026-10-18 08:11:46 +08:00

packet-captures.md

test(perf): evaluate larger and non-HTTP packet workflows (#3232)

2026-10-14 16:18:22 +08:00

pcap-analysis.md

fix(pcap): preserve exact UTC capture instants

2026-10-18 07:40:25 +08:00

process-capture.md

fix(process): preserve unrelated trace comparison uncertainty (#4178)

2026-10-16 00:56:55 +08:00

raw-binary.md

feat(ghidra): support raw big-endian m68k analysis (#4018)

2026-10-16 23:57:34 +08:00

reconstruction-coverage.md

fix(reconstruction): require comparable cited Evidence for coverage

2026-10-15 18:39:57 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction): require comparable cited Evidence for coverage

2026-10-15 18:39:57 +08:00

reconstruction-readiness.md

docs(readiness): align required stage identifier and checks with evaluator (#2200)

2026-10-13 00:15:54 +08:00

recorded-crashes.md

fix(pwndbg): reject core mapping paths that escape sysroot

2026-10-18 10:27:37 +08:00

releasing.md

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

reverse-engineering-tools.md

fix(cutter): normalize command checkpoint cancellation

2026-10-17 09:24:43 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

fix(rust): retain compatible cargo-auditable revisions

2026-10-14 14:47:26 +08:00

signal-recordings.md

feat(signals): discover installed decoders and option help (#2487)

2026-10-13 15:58:19 +09:00

sqlite-databases.md

fix(sqlite): preserve column identity before row selection

2026-10-17 15:33:59 +08:00

testing.md

fix(ci): handle cache eviction and composed cleanup assertions (#4824)

2026-10-18 01:08:14 +08:00

tool-design.md

fix(process): retain diagnostics through bounded output finalization

2026-10-18 01:03:19 +08:00

user-visible-errors.csv

fix(uninstall): preserve the configuration as it was before uninstall edits it

2026-10-17 04:57:06 +08:00

wasm-artifacts.md

fix(artifacts): preserve input size refusals and recovery

2026-10-17 08:45:15 +08:00

web-network-captures.md

fix(browser): preserve passive network inventory uncertainty

2026-10-15 02:28:46 +08:00

web-runtime.md

fix(browser): treat module-import initiator positions as script positions

2026-10-08 16:44:25 +00:00

web-source-location.md

fix(bun): report the real runtime and enforce worker memory budgets on Windows (#1730)

2026-10-11 19:20:00 +08:00

website-module-trace.md

feat(browser): trace captured website module imports (#879)

2026-10-07 14:59:52 +08:00

website-script-export.md

fix(browser): preserve body API provenance through script export

2026-10-12 14:12:19 +08:00

windows-ghidra-p0.md

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00