morluto cbd4bd4a66 fix(ghidra): explain literal search candidate evidence (#8816) ...

* fix(ghidra): explain literal search candidate evidence

* style(test): format CLI help default annotations (#9280)

(cherry picked from commit ac30fbd658)

2026-11-08 01:29:58 +08:00

..

.vitepress

feat(desktop): capture, draft, export and witness a task inside a build computer (#9045)

2026-11-07 17:54:59 +08:00

assets

docs(readme): show a dark showcase image on dark themes (#6915)

2026-10-24 05:51:22 +08:00

design

fix(filesystem): settle a Windows ChangeTime before recording a baseline (#8979)

2026-11-06 07:57:14 +08:00

readme

feat(native): report binary hardening for ELF, PE and Mach-O (#8524)

2026-11-06 01:07:00 +08:00

releases

docs: archive historical verification and release inventories (#7519)

2026-10-28 00:54:54 +08:00

specs

feat(native): retain LLDB source coordinates and verify Pascal calls (#2800)

2026-11-07 23:25:20 +08:00

verification

perf(mcp)!: defer retained views in progressive catalogs (#9151)

2026-11-06 22:44:56 +08:00

adb-device-analysis.md

fix(adb): separate unresolvable paths and host capacity in adb spawn failures (#6188)

2026-11-05 15:40:32 +08:00

agent-environments-quickstart.md

ci(environment): pin the real agentenv lane to agentenv-framework 0.9.1431 (#8865)

2026-11-06 01:53:53 +08:00

agent-environments.md

ci(environment): pin the real agentenv lane to agentenv-framework 0.9.1431 (#8865)

2026-11-06 01:53:53 +08:00

android-analysis.md

fix(android): ignore action-less filters in activity export defaults (#8030)

2026-11-04 19:28:59 +08:00

api-contracts.md

feat(api-contract): inspect local GraphQL SDL and field references (#9140)

2026-11-06 20:16:31 +08:00

apk-signature.md

docs(apk): clarify rotated signer agreement (#7936)

2026-10-29 20:00:02 +08:00

apktool-resource-analysis.md

fix(apktool): read Apktool 2.9+ metadata in its line-oriented dialect (#7747)

2026-10-28 19:46:11 +08:00

apple-application-analysis.md

fix(apple): read flattened framework Info.plist from Resources (#8101)

2026-10-30 01:00:06 -07:00

apple-ips.md

fix(apple): keep the documented terminating process, parent pid and metadata members of IPS reports (#7079)

2026-10-25 13:56:51 +08:00

architecture.mermaid

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

binary-diagnostics.md

feat(binary-layout): admit ELF64 AArch64 and name the refused host (#8711)

2026-11-03 09:37:41 +08:00

binary-hardening.md

feat(native): report binary hardening for ELF, PE and Mach-O (#8524)

2026-11-06 01:07:00 +08:00

browser-observation.md

fix(browser): keep negative script columns Chrome reports (#8684)

2026-11-03 14:50:00 +08:00

browser-scenario-contract.md

fix(browser)!: keep the Chromium sandbox for REA-launched browsers (#8738)

2026-11-04 23:54:29 +08:00

bun-standalone.md

feat(artifacts): inspect and extract Bun standalone module graphs (#6998)

2026-10-29 22:31:50 +08:00

capability-composition.md

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

ci-analysis.md

docs(ci): add a repeatable static analysis example (#6496)

2026-10-23 23:42:58 +09:00

cli.md

fix(cli): reject malformed dry-run literals before changes (#7870)

2026-11-06 22:30:39 +00:00

client-configuration.md

docs(clients): document llama.cpp MCP setup (#4878)

2026-11-07 15:16:02 +08:00

client-verification.md

docs(clients): document llama.cpp MCP setup (#4878)

2026-11-07 15:16:02 +08:00

desktop-application-capture.md

feat(desktop): capture, draft, export and witness a task inside a build computer (#9045)

2026-11-07 17:54:59 +08:00

desktop-application-export.md

fix(desktop): read JSON with deeply nested overwritten values (#9277)

2026-11-07 22:57:15 +08:00

desktop-application-state.md

feat(desktop): capture, draft, export and witness a task inside a build computer (#9045)

2026-11-07 17:54:59 +08:00

desktop-application-tasks.md

feat(desktop): capture, draft, export and witness a task inside a build computer (#9045)

2026-11-07 17:54:59 +08:00

desktop-applications.md

feat(desktop): suggest managed members for Unity script assemblies (#5511)

2026-11-04 19:53:00 +08:00

desktop-build-computer.md

feat(desktop): capture, draft, export and witness a task inside a build computer (#9045)

2026-11-07 17:54:59 +08:00

desktop-build-witness.md

feat(desktop): capture, draft, export and witness a task inside a build computer (#9045)

2026-11-07 17:54:59 +08:00

devicetree.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

dotnet-bundles.md

feat(artifacts): inspect and extract .NET single-file bundles (#3787)

2026-10-29 20:06:58 +08:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

fix(electron): preserve runtime rejection and exception policies (#8542)

2026-11-02 01:15:08 +08:00

elf-notes.md

feat(elf): decode Linux core dump process and memory mapping notes (#8830)

2026-11-04 11:46:11 +08:00

erlang-beam.md

test(erlang): cover lambdas names filter and chunks miss in BEAM views (#6973)

2026-10-24 17:39:57 +08:00

error-contract.schema.json

fix(mcp): name the close_binary retry for retained cleanup (#8329)

2026-10-31 11:12:30 -07:00

esp-flash-image.md

feat(artifacts): inventory and extract ESP flash layouts (#8228)

2026-10-31 15:24:32 +08:00

esp-image.md

feat(artifacts): inventory and extract ESP flash layouts (#8228)

2026-10-31 15:24:32 +08:00

evm-bytecode.md

fix(evm): explain limiter configuration and access failures (#8669)

2026-11-03 09:38:01 +08:00

firmware-analysis.md

docs(firmware): qualify component comparison workflows (#9143)

2026-11-06 21:15:58 +08:00

fit-images.md

docs(firmware): qualify component comparison workflows (#9143)

2026-11-06 21:15:58 +08:00

flutter-analysis.md

fix(flutter): read unlabeled Dart Version::String() from engines (#7232)

2026-11-03 14:48:21 +08:00

frida-instrumentation.md

fix!: retain Frida observations through shared finalization

2026-10-24 01:47:31 +08:00

ghidra-dol.md

docs(ghidra): fix DOL guide PowerPC link (#7857)

2026-10-29 04:57:59 +08:00

ghidra-dos.md

feat(ghidra): admit DOS MZ targets on Windows P0 (#7144)

2026-11-06 15:39:03 +08:00

ghidra-mips.md

test(ghidra): expect carved MIPS copies to be refused at target opening (#8227)

2026-10-31 15:24:17 +08:00

ghidra-nativeaot.md

fix(nativeaot): charge only examined candidate table entries

2026-10-24 04:23:56 +08:00

ghidra-ppc.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

ghidra-provider.md

feat(ghidra): checkpoint owned Programs across sessions

2026-11-07 14:52:39 +08:00

ghidra-psp.md

test(ghidra): verify PSP VFPU prefix and vector decoding (#8614)

2026-11-06 15:14:24 +08:00

ghidra-riscv.md

feat(ghidra): admit RISC-V ilp32 ELF with a derived calling convention (#8229)

2026-10-31 15:48:46 +08:00

go-binaries.md

merge: consolidate upstream ownership and coverage fixes

2026-10-24 04:43:33 +08:00

godot-pck.md

fix(artifacts): decide how compare_artifacts compares every format_metadata kind (#8231)

2026-11-04 23:53:01 +08:00

gpu-code-objects.md

fix(gpu): derive legacy bundle extents from codec framing

2026-10-24 02:35:21 +08:00

harmony-analysis.md

feat(harmony): disclose the unread pkgContextInfo.json declaration (#9096)

2026-11-06 14:26:41 +08:00

hex-records.md

fix(artifacts): decide how compare_artifacts compares every format_metadata kind (#8231)

2026-11-04 23:53:01 +08:00

http3-capture-lab.md

fix(deps): patch fast-uri, qs and HTTP/3 certifi (#7704)

2026-10-28 03:34:36 +00:00

ida-provider.md

fix(ida): admit Docker host-gateway names as local MCP hosts (#8932)

2026-11-05 18:34:28 +08:00

il2cpp-metadata.md

fix(il2cpp): validate structural record extents (#7861)

2026-10-29 01:55:47 +08:00

index.md

feat(desktop): capture, draft, export and witness a task inside a build computer (#9045)

2026-11-07 17:54:59 +08:00

ines-containers.md

feat(artifacts): inspect classic iNES container regions (#2816)

2026-10-31 15:49:16 +08:00

installation.md

fix(ghidra): make checkpoint workflows discoverable (#9246)

2026-11-07 16:56:33 +08:00

javascript-application-graph.md

fix(javascript): bound symbolic property and member queries (#8876)

2026-11-06 23:13:15 +00:00

javascript-application-workflows.md

feat(javascript): page retained feature traces through analysis views (#8522)

2026-11-01 08:56:05 -08:00

javascript-artifact-reconstruction.md

fix(javascript): apply package type scope to application sources (#7883)

2026-11-06 20:49:41 +08:00

javascript-recovery.md

fix(javascript): preserve recovery acquisition and cancellation failures

2026-10-24 03:11:07 +08:00

javascript-route-inventory.md

feat(evidence): read selected complete records without the whole bundle (#8528)

2026-11-01 08:56:58 -08:00

javascript-runtime-observation.md

fix(inspector): retain captures through authorization cleanup failures

2026-10-24 03:16:30 +08:00

javascript-runtime-reconciliation.md

fix(javascript): reconcile Node targets with entry assets (#8670)

2026-11-03 08:54:39 +08:00

jeb-analysis.md

fix(jeb): reconnect after stale MCP sessions (#3754)

2026-11-05 17:05:29 +08:00

kernel-modules.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

kuna-provider.md

feat(kuna): allow independent decompile retries (#8793)

2026-11-07 23:37:21 +08:00

managed-code-analysis.md

fix(managed): preserve unknown member ownership across invalid rows

2026-11-06 21:21:56 +00:00

mcp-catalog-evaluation.md

fix(mcp): clarify discovery bounds and isolate catalog evals (#9101)

2026-11-06 05:48:06 +00:00

mcp-contracts.md

fix!: qualify call paths by provider discovery (#8443)

2026-11-08 01:21:29 +08:00

mcp-prompts.md

fix(prompts): include existing static artifact investigation routes (#8972)

2026-11-05 18:37:20 +08:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

model-artifacts.md

fix(model): preserve uncertainty across released GGUF layouts

2026-10-24 02:00:10 +08:00

native-function-matching.md

fix(native): show function match limitations by default (#8558)

2026-11-08 01:10:38 +08:00

native-investigation.md

fix(ghidra): explain literal search candidate evidence (#8816)

2026-11-08 01:29:58 +08:00

node-sea.md

fix(node-sea): bound ELF note scans by the notes a carrier holds (#8031)

2026-11-04 19:31:14 +08:00

packet-captures.md

fix(captures): preserve canonical TShark alias fields

2026-10-23 19:07:46 +08:00

pcap-analysis.md

fix(pcap): redact HTTP credentials in failed capture diagnostics (#7871)

2026-10-28 18:14:22 +00:00

pe-certificates.md

fix(certificates)!: disclose undecoded unsigned attributes (#7920)

2026-10-29 08:56:07 +08:00

pe-imports.md

fix(pe): share header identity across native metadata readers

2026-10-24 16:08:26 +08:00

pe-load-config.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

playwright-traces.md

feat(browser): import saved Playwright v10 trace evidence (#9127)

2026-11-06 17:52:09 +08:00

process-capture.md

feat(process): add a non-executing dry run to capture_process_scenario (#8469)

2026-11-06 20:49:20 +08:00

python-packaged-applications.md

fix(pyinstaller): leave PE carrier binary members unmarked (#6730)

2026-11-05 17:05:12 +08:00

python-pyc.md

feat(python): qualify a recognized 3.14/3.15 pyc header (#8927)

2026-11-06 15:36:22 +08:00

raw-binary.md

docs: correct the raw ARM example and document a Cortex-M language override (#7483)

2026-10-30 22:28:06 +08:00

reconstruction-coverage.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction): qualify original process evidence at its owner

2026-10-24 06:13:53 +08:00

reconstruction-readiness.md

refactor(verification): separate readiness evidence scopes

2026-10-24 11:31:39 +08:00

recorded-crashes.md

feat(apple): inspect IPS crash reports (#6511)

2026-10-24 16:02:59 +08:00

releasing.md

feat(plugins): make Claude Code and Codex installs self-contained (#7514)

2026-10-27 17:13:17 +00:00

reverse-engineering-tools.md

feat(rizin): select the decoder and map address for one-shot commands (#8991)

2026-11-06 20:48:59 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

signal-recordings.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

sqlite-databases.md

test(sqlite): preserve worker failures through cleanup retry

2026-10-24 12:34:10 +08:00

testing-lanes.md

feat(rizin): select the decoder and map address for one-shot commands (#8991)

2026-11-06 20:48:59 +08:00

testing.md

docs(testing): explain npm launcher selection in PowerShell (#8962)

2026-11-05 15:35:20 +08:00

tool-design.md

fix!: qualify call paths by provider discovery (#8443)

2026-11-08 01:21:29 +08:00

uf2-dfuse.md

feat(artifacts): inventory and extract UF2 and DfuSe firmware containers (#8230)

2026-10-31 16:27:00 +08:00

uimage.md

fix(artifacts): name every U-Boot uImage type in the pinned image.h (#8007)

2026-10-29 15:13:37 +08:00

unityfs.md

fix(artifacts): decide how compare_artifacts compares every format_metadata kind (#8231)

2026-11-04 23:53:01 +08:00

user-visible-errors.csv

fix(cli): describe one-shot timeouts for an invocation whose session has ended (#8535)

2026-11-01 08:57:32 -08:00

wasm-artifacts.md

feat(evidence): read selected complete records without the whole bundle (#8528)

2026-11-01 08:56:58 -08:00

web-network-captures.md

feat(javascript): compare static endpoints with HAR captures (#9090)

2026-11-06 13:34:26 +08:00

web-runtime.md

fix(browser): keep negative script columns Chrome reports (#8684)

2026-11-03 14:50:00 +08:00

web-source-location.md

fix(source-maps): resolve empty sourceRoot sources against the map URL (#8107)

2026-10-30 01:00:41 -07:00

website-module-trace.md

fix(browser)!: keep the Chromium sandbox for REA-launched browsers (#8738)

2026-11-04 23:54:29 +08:00

website-script-export.md

docs: correct setup capture and recovery boundary guidance

2026-10-24 02:40:21 +08:00

windows-ghidra-p0.md

feat(ghidra): admit DOS MZ targets on Windows P0 (#7144)

2026-11-06 15:39:03 +08:00

wxapkg.md

feat(artifacts): read WeChat mini-program wxapkg containers (#8148)

2026-11-05 00:52:20 +08:00