Matt Van Horn c5198d0d04 docs(audit): state the packaged image read allowance ...

Packaged ELF, Mach-O and PE images are read in full and copied to a
temporary file, sharing one max_file_bytes allowance, but the docs and
coverage.allowances still said only a PE gets more than a header read.

Name the allowance and the copies in docs/release-exposure.md,
RELEASE_EXPOSURE_ALLOWANCES and the max_file_bytes description.

2026-11-02 09:42:53 -08:00

..

.vitepress

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

assets

docs(readme): show a dark showcase image on dark themes (#6915)

2026-10-24 05:51:22 +08:00

design

fix(cli): describe one-shot timeouts for an invocation whose session has ended (#8535)

2026-11-01 08:57:32 -08:00

readme

docs(readme): align Linux x64 analysis prerequisites (#7997)

2026-10-29 13:44:07 +08:00

releases

docs: archive historical verification and release inventories (#7519)

2026-10-28 00:54:54 +08:00

specs

feat(environment): serve sorted creates, listed references and toggles (#7600)

2026-10-29 18:46:18 +08:00

verification

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

adb-device-analysis.md

test: strengthen and prune audited test coverage (#8573)

2026-11-02 02:13:32 +08:00

agent-environments-quickstart.md

fix(environment)!: report recorded reads and target uncertainty (#7834)

2026-10-29 05:09:31 +08:00

agent-environments.md

feat(environment): serve sorted creates, listed references and toggles (#7600)

2026-10-29 18:46:18 +08:00

android-analysis.md

feat(android): trace callers of external DEX methods (#8154)

2026-10-31 01:07:18 +08:00

apk-signature.md

docs(apk): clarify rotated signer agreement (#7936)

2026-10-29 20:00:02 +08:00

apktool-resource-analysis.md

fix(apktool): read Apktool 2.9+ metadata in its line-oriented dialect (#7747)

2026-10-28 19:46:11 +08:00

apple-application-analysis.md

fix(apple): read flattened framework Info.plist from Resources (#8101)

2026-10-30 01:00:06 -07:00

apple-ips.md

fix(apple): keep the documented terminating process, parent pid and metadata members of IPS reports (#7079)

2026-10-25 13:56:51 +08:00

architecture.mermaid

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

binary-diagnostics.md

fix(native): retain ELF dynamic symbol visibility in export evidence and views (#8617)

2026-11-02 16:47:37 +08:00

browser-observation.md

fix(browser): preserve DOM length units in captures and comparisons (#7971)

2026-10-29 11:27:01 +08:00

browser-scenario-contract.md

fix(browser): disclose opaque redirect coverage gaps (#7943)

2026-10-29 07:57:00 +08:00

bun-standalone.md

feat(artifacts): inspect and extract Bun standalone module graphs (#6998)

2026-10-29 22:31:50 +08:00

capability-composition.md

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

ci-analysis.md

docs(ci): add a repeatable static analysis example (#6496)

2026-10-23 23:42:58 +09:00

cli.md

Merge remote-tracking branch 'upstream/main' into fix/release-exposure-audit

2026-11-02 01:28:14 -08:00

client-configuration.md

docs(setup): restore target and Hopper launch settings (#7902)

2026-10-29 23:03:02 +08:00

client-verification.md

fix(setup): register explicit MCP runtimes and preserve launcher identity

2026-10-26 02:33:31 +08:00

desktop-applications.md

fix(desktop): charge retained rows at their measured representation (#8105)

2026-10-30 01:00:28 -07:00

devicetree.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

dotnet-bundles.md

feat(artifacts): inspect and extract .NET single-file bundles (#3787)

2026-10-29 20:06:58 +08:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

fix(electron): preserve runtime rejection and exception policies (#8542)

2026-11-02 01:15:08 +08:00

elf-notes.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

erlang-beam.md

test(erlang): cover lambdas names filter and chunks miss in BEAM views (#6973)

2026-10-24 17:39:57 +08:00

error-contract.schema.json

fix(mcp): name the close_binary retry for retained cleanup (#8329)

2026-10-31 11:12:30 -07:00

esp-flash-image.md

feat(artifacts): inventory and extract ESP flash layouts (#8228)

2026-10-31 15:24:32 +08:00

esp-image.md

feat(artifacts): inventory and extract ESP flash layouts (#8228)

2026-10-31 15:24:32 +08:00

evm-bytecode.md

fix(analysis-view): keep inferred confidence on views of inferred Evidence (#8099)

2026-10-30 00:59:53 -07:00

firmware-analysis.md

feat(artifacts): inventory and extract UF2 and DfuSe firmware containers (#8230)

2026-10-31 16:27:00 +08:00

fit-images.md

feat(artifacts): inventory and extract U-Boot FIT images (#7771)

2026-10-29 13:33:26 +08:00

flutter-analysis.md

fix(flutter): qualify unsupported unified snapshot profiles

2026-10-24 04:28:54 +08:00

frida-instrumentation.md

fix!: retain Frida observations through shared finalization

2026-10-24 01:47:31 +08:00

ghidra-dol.md

docs(ghidra): fix DOL guide PowerPC link (#7857)

2026-10-29 04:57:59 +08:00

ghidra-dos.md

fix(ghidra): admit newer 12.x releases as compatible builds (#6924)

2026-10-27 03:49:12 +08:00

ghidra-mips.md

test(ghidra): expect carved MIPS copies to be refused at target opening (#8227)

2026-10-31 15:24:17 +08:00

ghidra-nativeaot.md

fix(nativeaot): charge only examined candidate table entries

2026-10-24 04:23:56 +08:00

ghidra-ppc.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

ghidra-provider.md

fix(ghidra): retain relocation symbol observations (#8531)

2026-11-01 23:53:56 +08:00

ghidra-psp.md

test(ghidra): expect carved MIPS copies to be refused at target opening (#8227)

2026-10-31 15:24:17 +08:00

ghidra-riscv.md

feat(ghidra): admit RISC-V ilp32 ELF with a derived calling convention (#8229)

2026-10-31 15:48:46 +08:00

go-binaries.md

merge: consolidate upstream ownership and coverage fixes

2026-10-24 04:43:33 +08:00

godot-pck.md

feat(artifacts): read Godot 3 PCK version 1 archives (#7781)

2026-10-28 19:43:43 +08:00

gpu-code-objects.md

fix(gpu): own CCOB boundaries and payload representations

2026-10-24 02:34:35 +08:00

harmony-analysis.md

fix(harmony): classify exact manifest names once (#7206)

2026-10-27 13:30:24 +08:00

hex-records.md

feat(artifacts): inventory and extract Intel HEX and Motorola S-record regions (#7136)

2026-10-28 12:35:55 +08:00

http3-capture-lab.md

fix(deps): patch fast-uri, qs and HTTP/3 certifi (#7704)

2026-10-28 03:34:36 +00:00

ida-provider.md

fix(discovery): carry provider repair instructions into capability discovery (#8532)

2026-11-01 08:57:11 -08:00

il2cpp-metadata.md

fix(il2cpp): validate structural record extents (#7861)

2026-10-29 01:55:47 +08:00

index.md

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

ines-containers.md

feat(artifacts): inspect classic iNES container regions (#2816)

2026-10-31 15:49:16 +08:00

installation.md

fix(setup): refuse Hopper on macOS below the release's minimum (#8548)

2026-11-02 00:05:30 -08:00

javascript-application-graph.md

fix(javascript): separate endpoint syntax correspondence from target identity

2026-10-24 03:59:44 +08:00

javascript-application-workflows.md

feat(javascript): page retained feature traces through analysis views (#8522)

2026-11-01 08:56:05 -08:00

javascript-artifact-reconstruction.md

fix(javascript): report SVG script references and skipped bodies (#8627)

2026-11-02 15:55:56 +08:00

javascript-recovery.md

fix(javascript): preserve recovery acquisition and cancellation failures

2026-10-24 03:11:07 +08:00

javascript-route-inventory.md

feat(evidence): read selected complete records without the whole bundle (#8528)

2026-11-01 08:56:58 -08:00

javascript-runtime-observation.md

fix(inspector): retain captures through authorization cleanup failures

2026-10-24 03:16:30 +08:00

javascript-runtime-reconciliation.md

fix(javascript): distinguish bundled script locations (#7909)

2026-10-29 07:56:06 +08:00

jeb-analysis.md

fix(jeb)!: preserve engine refusal diagnostics

2026-10-27 06:22:10 +08:00

kernel-modules.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

kuna-provider.md

fix(native): find procedures by the secondary names exact lookup accepts (#8520)

2026-11-01 08:53:29 -08:00

managed-code-analysis.md

feat(dotnet): expose field constant defaults (#8015)

2026-10-31 00:10:36 +08:00

mcp-contracts.md

feat(native): deliver batch decompile as a retained summary (#8631)

2026-11-02 00:50:42 -08:00

mcp-prompts.md

feat(guidance): distinguish focused matches from broad parent sections (#8305)

2026-10-31 11:11:05 -07:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

model-artifacts.md

fix(model): preserve uncertainty across released GGUF layouts

2026-10-24 02:00:10 +08:00

native-function-matching.md

feat(native): make function matching allowance configurable (#7159)

2026-10-26 02:22:32 +08:00

native-investigation.md

feat(native): deliver batch decompile as a retained summary (#8631)

2026-11-02 00:50:42 -08:00

node-sea.md

fix(artifacts): compare Node SEA member declarations

2026-10-27 06:06:27 +08:00

packet-captures.md

fix(captures): preserve canonical TShark alias fields

2026-10-23 19:07:46 +08:00

pcap-analysis.md

fix(pcap): redact HTTP credentials in failed capture diagnostics (#7871)

2026-10-28 18:14:22 +00:00

pe-certificates.md

fix(certificates)!: disclose undecoded unsigned attributes (#7920)

2026-10-29 08:56:07 +08:00

pe-imports.md

fix(pe): share header identity across native metadata readers

2026-10-24 16:08:26 +08:00

pe-load-config.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

process-capture.md

perf(process): reuse a verified Darwin ownership helper across processes (#8318)

2026-10-31 11:12:02 -07:00

python-packaged-applications.md

fix(artifacts): retain raw archive keys across entry projections

2026-10-25 03:30:22 +08:00

python-pyc.md

feat(python): query selected pyc code-object facts (#6928)

2026-10-24 10:23:06 +08:00

raw-binary.md

docs: correct the raw ARM example and document a Cortex-M language override (#7483)

2026-10-30 22:28:06 +08:00

reconstruction-coverage.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction): qualify original process evidence at its owner

2026-10-24 06:13:53 +08:00

reconstruction-readiness.md

refactor(verification): separate readiness evidence scopes

2026-10-24 11:31:39 +08:00

recorded-crashes.md

feat(apple): inspect IPS crash reports (#6511)

2026-10-24 16:02:59 +08:00

release-exposure.md

docs(audit): state the packaged image read allowance

2026-11-02 09:42:53 -08:00

releasing.md

feat(plugins): make Claude Code and Codex installs self-contained (#7514)

2026-10-27 17:13:17 +00:00

reverse-engineering-tools.md

docs(cutter): explain bridge descriptor discovery configuration

2026-10-24 17:21:08 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

signal-recordings.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

sqlite-databases.md

test(sqlite): preserve worker failures through cleanup retry

2026-10-24 12:34:10 +08:00

testing-lanes.md

docs: clarify test audits and organize verification lanes

2026-11-02 02:21:40 +08:00

testing.md

fix(process): re-read unreadable tokens before signaling and name the process (#8553)

2026-11-02 00:21:23 -08:00

tool-design.md

docs(providers): verify prerequisite recovery and sibling failures

2026-11-01 21:14:27 +08:00

uf2-dfuse.md

feat(artifacts): inventory and extract UF2 and DfuSe firmware containers (#8230)

2026-10-31 16:27:00 +08:00

uimage.md

fix(artifacts): name every U-Boot uImage type in the pinned image.h (#8007)

2026-10-29 15:13:37 +08:00

unityfs.md

feat(artifacts): read UnityFS AssetBundle containers (#7699)

2026-10-28 16:47:39 +08:00

user-visible-errors.csv

fix(cli): describe one-shot timeouts for an invocation whose session has ended (#8535)

2026-11-01 08:57:32 -08:00

wasm-artifacts.md

feat(evidence): read selected complete records without the whole bundle (#8528)

2026-11-01 08:56:58 -08:00

web-network-captures.md

fix(captures): admit browser-serialized HAR request URLs (#8112)

2026-10-30 01:03:35 -07:00

web-runtime.md

fix(browser): retain truthful cleanup facts and document request ownership

2026-10-24 03:59:44 +08:00

web-source-location.md

fix(source-maps): resolve empty sourceRoot sources against the map URL (#8107)

2026-10-30 01:00:41 -07:00

website-module-trace.md

fix(analysis): preserve artifact and selection error ownership

2026-10-24 22:54:05 +08:00

website-script-export.md

docs: correct setup capture and recovery boundary guidance

2026-10-24 02:40:21 +08:00

windows-ghidra-p0.md

fix(discovery): carry provider repair instructions into capability discovery (#8532)

2026-11-01 08:57:11 -08:00