Kaoru0822andClaude Opus 5.5 eeab0bda20 fix(environment): scan every form occurrence and MIME-less scenario bodies ...

The build's credential scan collapsed form bodies with Object.fromEntries, so a
repeated field kept only its last occurrence: `api_key=secret&api_key=` warned
about nothing although the Evidence ships the value, and repeated values were
undercounted. Form fields are now scanned as ordered name/value pairs, as
headers and query strings already are.

The review projection of a capture_browser_scenario dropped a request body
recorded without a media type, so the scan never saw it. Review keeps such a
body's text with an empty media type; the manifest projection still reads only
bodies it can classify.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-24 03:49:54 +00:00

..

.vitepress

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

assets

docs(readme): show a dark showcase image on dark themes (#6915)

2026-10-24 05:51:22 +08:00

design

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

readme

docs(readme): show a dark showcase image on dark themes (#6915)

2026-10-24 05:51:22 +08:00

releases

chore(release/6.7.0): release rea-agents 6.7.0 (#4983)

2026-10-18 15:40:45 +08:00

specs

fix(environment): scan every form occurrence and MIME-less scenario bodies

2026-10-24 03:49:54 +00:00

verification

feat(javascript): link assignment right-hand sides to their writes (#6206)

2026-10-24 10:04:38 +08:00

adb-device-analysis.md

fix(adb): own numeric declaration validation and diagnostics

2026-10-24 06:34:33 +08:00

agent-environments.md

docs(environment): state the build's conditions and record its verification

2026-10-23 17:26:18 -07:00

android-analysis.md

fix(android): preserve metadata dialect and root manifest identity

2026-10-24 01:24:43 +08:00

apk-signature.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

apktool-resource-analysis.md

fix(apktool): retain acquisition and launcher failure reasons

2026-10-24 02:29:08 +08:00

apple-application-analysis.md

docs(mcp): state plist inspection session prerequisite

2026-10-24 04:16:47 +08:00

architecture.mermaid

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

binary-diagnostics.md

fix(ghidra): report kernel OOM kills as a memory constraint (#6748)

2026-10-24 05:53:05 +08:00

browser-observation.md

fix(browser): preserve main-frame identity and scope refusal context

2026-10-24 08:48:19 +08:00

browser-scenario-contract.md

fix(browser): preserve admission failures and retain policy transport cleanup

2026-10-24 04:06:57 +08:00

ci-analysis.md

docs(ci): add a repeatable static analysis example (#6496)

2026-10-23 23:42:58 +09:00

cli.md

Merge remote-tracking branch 'origin/main' into eb

2026-10-23 19:02:18 -07:00

client-configuration.md

feat(ghidra): bound one procedure's decompile without closing the session (#5662)

2026-10-24 07:42:50 +08:00

client-verification.md

fix(verification): bind Copilot schema profile to observed inputs

2026-10-24 03:16:29 +08:00

desktop-applications.md

docs(desktop): list all supported IL2CPP metadata versions

2026-10-24 00:11:41 +08:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

elf-notes.md

merge: reconcile concurrent main fixes with issue remediation

2026-10-24 02:45:14 +08:00

erlang-beam.md

fix(beam): distinguish empty optional chunk payloads

2026-10-24 02:35:21 +08:00

error-contract.schema.json

fix(mcp): guide agents through tool error recovery (#5470)

2026-10-20 21:45:05 +08:00

evm-bytecode.md

fix(evm): preserve reply allowance failures and selected limits

2026-10-24 02:40:21 +08:00

firmware-analysis.md

fix(firmware): preserve admission and extraction coverage outcomes

2026-10-24 03:00:09 +08:00

flutter-analysis.md

fix(flutter): qualify unsupported unified snapshot profiles

2026-10-24 04:28:54 +08:00

frida-instrumentation.md

fix!: retain Frida observations through shared finalization

2026-10-24 01:47:31 +08:00

ghidra-dos.md

docs: clarify evidence ownership and verification guidance

2026-10-23 17:13:00 +08:00

ghidra-mips.md

fix(ghidra): reconcile GNU MIPS ABI declarations

2026-10-14 14:47:26 +08:00

ghidra-nativeaot.md

fix(nativeaot): charge only examined candidate table entries

2026-10-24 04:23:56 +08:00

ghidra-ppc.md

feat(ghidra): admit 32-bit big-endian PowerPC ELF (#1747)

2026-10-14 06:35:55 +08:00

ghidra-provider.md

feat(ghidra): bound one procedure's decompile without closing the session (#5662)

2026-10-24 07:42:50 +08:00

ghidra-psp.md

feat(ghidra): admit bounded PSP ELF through installed Allegrex (#1599)

2026-10-11 19:47:33 +08:00

ghidra-riscv.md

feat(ghidra): support raw NMOS 6502 analysis (#2079)

2026-10-13 21:13:01 +08:00

go-binaries.md

merge: consolidate upstream ownership and coverage fixes

2026-10-24 04:43:33 +08:00

godot-pck.md

fix(parsers): respect container facts and real decoding boundaries

2026-10-23 23:02:07 +08:00

gpu-code-objects.md

fix(gpu): own CCOB boundaries and payload representations

2026-10-24 02:34:35 +08:00

harmony-analysis.md

fix(harmony): retain path-only package and signing observations

2026-10-24 02:40:22 +08:00

http3-capture-lab.md

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

ida-provider.md

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

il2cpp-metadata.md

fix(native): preserve parsed section and architecture facts

2026-10-24 07:28:09 +08:00

index.md

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

installation.md

feat(ghidra): bound one procedure's decompile without closing the session (#5662)

2026-10-24 07:42:50 +08:00

javascript-application-graph.md

fix(javascript): separate endpoint syntax correspondence from target identity

2026-10-24 03:59:44 +08:00

javascript-application-workflows.md

feat(javascript): link assignment right-hand sides to their writes (#6206)

2026-10-24 10:04:38 +08:00

javascript-artifact-reconstruction.md

fix(javascript): resolve proven URL constructor aliases

2026-10-24 10:17:23 +08:00

javascript-recovery.md

fix(javascript): preserve recovery acquisition and cancellation failures

2026-10-24 03:11:07 +08:00

javascript-route-inventory.md

fix(javascript): preserve route selection owners and uncertainty

2026-10-24 04:25:13 +08:00

javascript-runtime-observation.md

fix(inspector): retain captures through authorization cleanup failures

2026-10-24 03:16:30 +08:00

javascript-runtime-reconciliation.md

fix(browser): preserve unknown script ownership through reconciliation

2026-10-24 04:23:56 +08:00

jeb-analysis.md

fix(jeb): retain selected inputs and completed primary replies

2026-10-24 03:00:07 +08:00

kuna-provider.md

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

managed-code-analysis.md

fix(managed): preserve malformed signature uncertainty in comparisons

2026-10-24 10:17:23 +08:00

mcp-contracts.md

fix(native): preserve qualified feature trace observations

2026-10-24 09:17:10 +08:00

mcp-prompts.md

fix(mcp): enforce initialization and discovery contracts

2026-10-24 02:41:17 +08:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

model-artifacts.md

fix(model): preserve uncertainty across released GGUF layouts

2026-10-24 02:00:10 +08:00

native-function-matching.md

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

native-investigation.md

fix(native): decode plist sources within result capacity

2026-10-24 10:17:23 +08:00

packet-captures.md

fix(captures): preserve canonical TShark alias fields

2026-10-23 19:07:46 +08:00

pcap-analysis.md

fix(pcap): preserve header snapshot limit with inferred lengths

2026-10-24 10:35:50 +08:00

pe-certificates.md

fix(pe): accept WIN_CERTIFICATE padding counted in dwLength (#6721)

2026-10-24 06:04:41 +08:00

process-capture.md

fix(process): validate rendered omission causes in saved captures

2026-10-24 09:36:14 +08:00

python-packaged-applications.md

fix(artifacts): preserve typed resource limit diagnoses

2026-10-24 03:00:08 +08:00

python-pyc.md

feat(python): query selected pyc code-object facts (#6928)

2026-10-24 10:23:06 +08:00

raw-binary.md

feat(ghidra): support raw big-endian m68k analysis (#4018)

2026-10-16 23:57:34 +08:00

reconstruction-coverage.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction): qualify original process evidence at its owner

2026-10-24 06:13:53 +08:00

reconstruction-readiness.md

merge: consolidate upstream ownership and coverage fixes

2026-10-24 04:43:33 +08:00

recorded-crashes.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

releasing.md

docs: repair localized anchors and agent terminology

2026-10-24 02:40:21 +08:00

reverse-engineering-tools.md

fix(gdb): preserve configured executable launch recovery

2026-10-24 04:47:45 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

fix(native): preserve parsed section and architecture facts

2026-10-24 07:28:09 +08:00

signal-recordings.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

sqlite-databases.md

merge: reconcile concurrent main fixes with issue remediation

2026-10-24 02:45:14 +08:00

testing.md

Merge remote-tracking branch 'origin/main' into eb

2026-10-23 19:02:18 -07:00

tool-design.md

fix(evidence): retain owner finalization reports across cleanup envelopes

2026-10-24 04:38:08 +08:00

user-visible-errors.csv

feat(ghidra): bound one procedure's decompile without closing the session (#5662)

2026-10-24 07:42:50 +08:00

wasm-artifacts.md

merge: consolidate upstream ownership and coverage fixes

2026-10-24 04:43:33 +08:00

web-network-captures.md

docs(environment): state the build's conditions and record its verification

2026-10-23 17:26:18 -07:00

web-runtime.md

fix(browser): retain truthful cleanup facts and document request ownership

2026-10-24 03:59:44 +08:00

web-source-location.md

fix(sourcemaps): bind cleanup status to remaining codec owners

2026-10-24 03:10:43 +08:00

website-module-trace.md

fix(web): select source grammar for module tracing

2026-10-24 02:35:36 +08:00

website-script-export.md

docs: correct setup capture and recovery boundary guidance

2026-10-24 02:40:21 +08:00

windows-ghidra-p0.md

docs: repair localized anchors and agent terminology

2026-10-24 02:40:21 +08:00