gensokyo-dev ba73ccafd3 fix(mcp): classify HTTP binds from native address facts ...

Classify loopback from the actual bound IP only, then add the configured name to the Host/Origin allowlist. Remove DNS-name classification and the default/fallback that substituted configuration for binding evidence.

Validate the TCP address once before URL/allowlist consumers, preserve IPv4 and IPv6 alias behavior, and add negative controls for localhost names bound to non-loopback IPv4 and IPv6 addresses.

2026-10-19 14:05:23 +00:00

..

.vitepress

feat(kuna): serve procedures, pseudocode and assembly from Kuna exports (#3854)

2026-10-15 00:53:26 -07:00

assets

docs: keep license sections text-only

2026-10-10 00:09:46 +08:00

readme

fix(ci): handle cache eviction and composed cleanup assertions (#4824)

2026-10-18 01:08:14 +08:00

releases

chore(release/6.7.0): release rea-agents 6.7.0 (#4983)

2026-10-18 15:40:45 +08:00

specs

fix(mcp): classify HTTP binds from native address facts

2026-10-19 14:05:23 +00:00

verification

fix(electron): delegate once dispatch to the active runtime (#4605)

2026-10-17 06:38:13 +08:00

adb-device-analysis.md

fix(adb): preserve display-scoped window focus declarations

2026-10-17 13:40:09 +08:00

android-analysis.md

fix(tests): restore Android prerequisite verification

2026-10-18 12:46:25 +00:00

apktool-resource-analysis.md

fix(apktool)!: select numeric regions using Android b+ qualifiers

2026-10-19 03:25:25 +08:00

apple-application-analysis.md

fix(mobile): classify authenticated file occurrences as components

2026-10-17 19:58:18 +08:00

architecture.mermaid

feat(mcp): serve the MCP server over streamable HTTP

2026-10-17 21:05:10 -07:00

binary-diagnostics.md

fix(ghidra): own operation-scoped JVM failure evidence

2026-10-19 17:15:32 +08:00

browser-observation.md

fix(browser): isolate web bundle analysis with bounded partial results

2026-10-19 13:22:54 +08:00

browser-scenario-contract.md

docs(browser): clarify scenario cleanup after termination

2026-10-17 13:49:20 +08:00

cli.md

chore: integrate streamable HTTP with current main

2026-10-19 05:00:47 +00:00

client-configuration.md

fix(setup): preserve configuration identity and inspection uncertainty

2026-10-17 00:44:02 +08:00

client-verification.md

fix(tests): complete independent agent evaluation cleanup

2026-10-19 11:54:04 +00:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

fix(runtime): retain Inspector and Electron cleanup ownership

2026-10-19 14:03:28 +08:00

error-contract.schema.json

feat(evm): inspect offline bytecode interfaces through EVMole (#1051)

2026-10-08 15:32:05 +08:00

evm-bytecode.md

feat(evm): inspect lossless Solidity terminal CBOR metadata (#2790)

2026-10-13 21:55:30 +08:00

firmware-analysis.md

fix(firmware): preserve snapshot input failures and descriptor ownership

2026-10-17 08:53:56 +08:00

flutter-analysis.md

fix(flutter): select reported ABI labels through shared contracts

2026-10-19 18:38:57 +08:00

frida-instrumentation.md

fix(frida): preserve script evidence through cancellation and decoding

2026-10-19 16:41:15 +08:00

ghidra-dos.md

fix(ghidra): compare final DOS relocation windows

2026-10-17 19:30:11 +08:00

ghidra-mips.md

fix(ghidra): reconcile GNU MIPS ABI declarations

2026-10-14 14:47:26 +08:00

ghidra-nativeaot.md

fix(ghidra): use resolved type addresses for NativeAOT metadata

2026-10-15 21:05:33 +08:00

ghidra-ppc.md

feat(ghidra): admit 32-bit big-endian PowerPC ELF (#1747)

2026-10-14 06:35:55 +08:00

ghidra-provider.md

perf(ghidra): aggregate binary overview at the provider boundary (#4754)

2026-10-17 10:44:24 +00:00

ghidra-psp.md

feat(ghidra): admit bounded PSP ELF through installed Allegrex (#1599)

2026-10-11 19:47:33 +08:00

ghidra-riscv.md

feat(ghidra): support raw NMOS 6502 analysis (#2079)

2026-10-13 21:13:01 +08:00

go-binaries.md

fix(artifacts): preserve input size refusals and recovery

2026-10-17 08:45:15 +08:00

harmony-analysis.md

fix(mobile): derive runtime hints from classified components

2026-10-17 20:02:26 +08:00

http3-capture-lab.md

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

ida-provider.md

fix(ida): refuse universal Mach-O targets in attached profiles (#4765)

2026-10-17 04:27:46 -07:00

index.md

feat(kuna): serve procedures, pseudocode and assembly from Kuna exports (#3854)

2026-10-15 00:53:26 -07:00

installation.md

fix(uninstall): retain per-file partial outcomes

2026-10-19 07:22:01 +08:00

javascript-application-graph.md

fix(javascript): retain unresolved network targets with provenance

2026-10-16 08:14:52 +08:00

javascript-application-workflows.md

fix(javascript): converge cyclic aliases with explicit projection widening

2026-10-19 12:26:54 +08:00

javascript-artifact-reconstruction.md

fix(javascript): bound semantic unknown retention at projection

2026-10-17 21:57:31 +08:00

javascript-recovery.md

fix(javascript): report oversized recovery inputs as file-size limits (#4757)

2026-10-17 04:26:39 -07:00

javascript-runtime-observation.md

fix(runtime): retain Inspector and Electron cleanup ownership

2026-10-19 14:03:28 +08:00

javascript-runtime-reconciliation.md

fix(javascript): preserve mapped runtime digest disagreements

2026-10-15 17:04:49 +08:00

jeb-analysis.md

docs(jeb): qualify Linux CE native workflows (#5002)

2026-10-18 17:13:04 +08:00

kuna-provider.md

fix(kuna): name the setting that owns a timed-out Kuna run (#4343)

2026-10-17 00:38:16 -07:00

managed-code-analysis.md

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00

mcp-contracts.md

fix(mcp): classify HTTP binds from native address facts

2026-10-19 14:05:23 +00:00

mcp-prompts.md

fix(mcp): preserve procedure aliases and complete name ambiguity

2026-10-19 08:54:23 +08:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

native-investigation.md

fix(native): preserve partial call reference evidence

2026-10-19 07:12:44 +08:00

packet-captures.md

test(perf): evaluate larger and non-HTTP packet workflows (#3232)

2026-10-14 16:18:22 +08:00

pcap-analysis.md

fix(pcap): preserve exact UTC capture instants

2026-10-18 07:40:25 +08:00

process-capture.md

fix(process): retain native ownership evidence through cleanup

2026-10-19 20:04:00 +08:00

raw-binary.md

feat(ghidra): support raw big-endian m68k analysis (#4018)

2026-10-16 23:57:34 +08:00

reconstruction-coverage.md

fix(reconstruction): require comparable cited Evidence for coverage

2026-10-15 18:39:57 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction): require comparable cited Evidence for coverage

2026-10-15 18:39:57 +08:00

reconstruction-readiness.md

docs(readiness): align required stage identifier and checks with evaluator (#2200)

2026-10-13 00:15:54 +08:00

recorded-crashes.md

fix(pwndbg): reject core mapping paths that escape sysroot

2026-10-18 10:27:37 +08:00

releasing.md

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

reverse-engineering-tools.md

feat(objdump): select native disassembly by symbol (#5171)

2026-10-19 20:15:20 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

fix(rust): retain compatible cargo-auditable revisions

2026-10-14 14:47:26 +08:00

signal-recordings.md

feat(signals): discover installed decoders and option help (#2487)

2026-10-13 15:58:19 +09:00

sqlite-databases.md

fix(sqlite): preserve column identity before row selection

2026-10-17 15:33:59 +08:00

testing.md

fix(process): retain native ownership evidence through cleanup

2026-10-19 20:04:00 +08:00

tool-design.md

fix(process): retain diagnostics through bounded output finalization

2026-10-18 01:03:19 +08:00

user-visible-errors.csv

fix(uninstall): preserve the configuration as it was before uninstall edits it

2026-10-17 04:57:06 +08:00

wasm-artifacts.md

fix(artifacts): preserve input size refusals and recovery

2026-10-17 08:45:15 +08:00

web-network-captures.md

fix(browser): retain historical capture outcomes through cleanup

2026-10-19 14:03:57 +08:00

web-runtime.md

fix(browser): treat module-import initiator positions as script positions

2026-10-08 16:44:25 +00:00

web-source-location.md

fix(bun): report the real runtime and enforce worker memory budgets on Windows (#1730)

2026-10-11 19:20:00 +08:00

website-module-trace.md

feat(browser): trace captured website module imports (#879)

2026-10-07 14:59:52 +08:00

website-script-export.md

fix(browser): preserve body API provenance through script export

2026-10-12 14:12:19 +08:00

windows-ghidra-p0.md

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00