mirror of
https://github.com/morluto/rea.git
synced 2026-11-12 01:41:21 +00:00
2SinceJuly
ccb45f5712
An acquired $MFT stream had no reader, so an analyst holding one could only treat it as an opaque file. Recognize the FILE signature of the first record and inventory every record's header: sequence number, flags, used and total bytes, base record reference and update-sequence array. Each record's update-sequence fixups are verified against its sector trailers. A mismatch keeps the header facts, is reported on the record and is counted in the metadata, so a record that was not cleanly written is visible rather than silently accepted. A missing or short array is reported as unverified, a wrong signature stops the scan at its offset, and a trailing partial record is reported as a byte count. Attributes, filenames and the $UsnJrnl:$J journal are not decoded, so no path or change history is claimed. Fixes #9867
Feature specifications
This directory indexes proposals and implementation records. It is not a catalog of current capabilities; use the documentation directory for current guides. Preserve original requirements and dated verification evidence when later increments change behavior.
New feature directories use one spec.md, one plan.md and one tasks.md.
Some historical records have fewer artifacts; their presence or absence does not
establish completion. Do not invent past plans or completed tasks to fill gaps.
Follow documentation ownership and authoring
for new work, roadmap granularity and producer-owned contracts.
Environment roadmaps
Other feature records
- Core WebAssembly interface comparison (#2356) (plan, tasks, verification)
- Inspect APK signature schemes (v1–v3.1)
- Documentation organization (plan, tasks, verification)
- V8 cached-data compilation boundaries (plan, tasks)
- Android
.note.android.identELF note decoding (plan, tasks) - Native call source coordinates (plan, tasks, verification)
- Go static string-header literal recovery (plan, tasks)
- Windows Shell Link shortcut inspection (plan, tasks)
- NTFS $MFT and USN Journal inspection (plan, tasks)
- Solidity terminal metadata inspection (plan, tasks, verification)
- Inspect a V8 code cache container (plan, tasks)
- Deno compile executable inventory and extraction (plan, tasks)
- ELF unwind function ranges (plan, tasks)
- Linux kernel build config (plan, tasks)
- Native initializers (plan, tasks)