Matt Van Horn 47789cdaa8 feat(pe): inspect Authenticode certificate tables ...

Add inspect_pe_certificates for IMAGE_DIRECTORY_ENTRY_SECURITY
WIN_CERTIFICATE entries and structurally decoded PKCS#7 signer
and X.509 identity fields. The workflow reads a stable PE image
without executing it or verifying signatures, chains, timestamps,
or Authenticode digest coverage.

2026-10-21 23:23:10 +00:00

..

ci

ci(windows): run remaining Windows-only path admission cases in the lane (#5807)

2026-10-22 02:52:11 +08:00

fixtures

feat(javascript): add filtered retained module reference views

2026-10-15 21:05:00 +08:00

lib

feat(pe): inspect Authenticode certificate tables

2026-10-21 23:23:10 +00:00

verify

fix(ci): validate artifact MCP replies against named schemas (#6021)

2026-10-21 23:28:12 +08:00

audit-website-links.py

chore(website): simplify maintenance and detect documentation drift

2026-10-10 20:27:01 +08:00

build-conformance-fixtures.mjs

refactor(schema): remove data-only version markers

2026-09-29 08:45:36 +08:00

build-ghidra-nativeaot.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

build-windows-native.mjs

fix(windows): retain failed native inspection ownership (#1826)

2026-10-11 21:33:25 +08:00

bundle-runtime.d.mts

perf(cli): bundle runtime entries to reduce Windows startup I/O (#1996)

2026-10-12 09:25:27 +08:00

bundle-runtime.mjs

fix(cli): preserve failure semantics across full-output formats

2026-10-13 03:33:27 +08:00

check-dependency-install.mjs

fix(deps): run freshness check from escaped paths

2026-07-16 19:51:25 +08:00

check-doc-facts.mjs

build: add canonical product catalog and docs drift checks

2026-07-15 17:43:52 +08:00

clean-build-output.mjs

build: separate runtime artifacts and supervise command ownership

2026-10-09 20:11:17 +08:00

create-ghidra-windows-fixture.mjs

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00

electron-active-hook-boundaries.cjs

fix(electron): block moveToApplicationsFolder during active capture (#3471)

2026-10-22 04:07:48 +08:00

electron-active-hook.cjs

fix(electron): preserve callback ownership through listener removal

2026-10-19 09:51:04 +08:00

generate-completion-ledger.mjs

fix(build): make catalogs and packaged skills generated outputs (#1086)

2026-10-08 22:43:51 +08:00

generate-error-schema.mjs

chore: migrate formatting to Oxfmt (#615)

2026-10-06 01:59:19 +08:00

generate-mcp-tool-catalog.mjs

build: separate runtime artifacts and supervise command ownership

2026-10-09 20:11:17 +08:00

generate-nativeaot-fixtures.mjs

fix(ghidra): resolve file offsets in decompile (#2101)

2026-10-13 18:23:17 +08:00

generate-package-metadata.mjs

fix(skills): expose authored skill to repository discovery

2026-10-10 14:20:22 +08:00

generate-product-catalog.mjs

fix(build): make catalogs and packaged skills generated outputs (#1086)

2026-10-08 22:43:51 +08:00

generate-skill-metadata.mjs

perf(mcp)!: default to compact input schema advertisements (#5975)

2026-10-22 00:17:11 +08:00

generate-third-party-inventory.mjs

fix: align MCP archive contracts and documentation (#2478)

2026-10-13 12:06:41 +08:00

hopper-demo-x11.py

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

prepack.mjs

fix(cli): preserve failure semantics across full-output formats

2026-10-13 03:33:27 +08:00

prepare-reverse-tools-mutation.mjs

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

prepare-website.py

feat(website): add multilingual editions and translation workflow

2026-10-11 17:24:46 +08:00

prepare.mjs

build: streamline local and CI validation

2026-07-22 16:06:28 +00:00

print-mcp-config.mjs

fix(npm): use latest entry points without install scripts

2026-07-17 00:16:46 +00:00

rea-android-workspace-guardian.mjs

fix(android): clean Windows workspaces after owner termination (#2440)

2026-10-13 22:03:16 +08:00

rea.mjs

perf(javascript): reuse the source-analysis worker within a process (#5819)

2026-10-21 19:01:20 +08:00

record-catalog-digests.mjs

perf(mcp): record catalog identities for all schema profiles (#5415)

2026-10-20 10:09:28 +00:00

release-notes.mjs

fix(release): avoid duplicated contributor thanks

2026-10-11 11:49:49 +08:00

release-npm-tag.mjs

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

run-development-tests.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-exact-tests.mjs

fix(test): reject excluded symlink aliases in exact selection

2026-10-14 13:58:17 +08:00

run-exclusive-command.mjs

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

run-exclusive.mjs

build: separate runtime artifacts and supervise command ownership

2026-10-09 20:11:17 +08:00

run-turbo.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-typescript.d.mts

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-typescript.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

scan-todos.mjs

chore(scripts): merge duplicate node:fs import in scan-todos (#1790)

2026-10-11 18:18:10 +08:00

test-website.py

fix(website): use Noto Sans KR for Korean text (#3821)

2026-10-17 00:22:09 +08:00

verify-adb.mjs

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

verify-agent-experience.mjs

fix(evaluation): join owned command cleanup before removing files (#5613)

2026-10-20 16:16:29 +00:00

verify-agentenv-environment.mjs

feat(environment)!: serve the environment state by default (#5351)

2026-10-22 05:04:57 +08:00

verify-apktool.mjs

feat(apktool): share one APK resource decode across selected locale tables (#4777) (#4804)

2026-10-18 03:57:17 +08:00

verify-binary-layout.mjs

fix(native): clarify Mach-O offset origins and reject partial ELF tables

2026-10-12 06:29:19 +08:00

verify-browser-dom-destinations.mjs

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

verify-browser-modules.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-network.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-runtime.mjs

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

verify-browser-scripts.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-source-maps.mjs

fix(verifiers): require positive ownership and restore cleanup coverage

2026-10-14 09:47:57 +08:00

verify-claude-client.mjs

perf(mcp)!: default to compact input schema advertisements (#5975)

2026-10-22 00:17:11 +08:00

verify-commandcode-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-conformance-fixtures.mjs

refactor(schema): remove data-only version markers

2026-09-29 08:45:36 +08:00

verify-copilot-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-deepseek-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-evm-interface.mjs

feat(evm): inspect lossless Solidity terminal CBOR metadata (#2790)

2026-10-13 21:55:30 +08:00

verify-flutter.mjs

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

verify-frida.mjs

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

verify-gemini-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-ghidra-bridge-sources.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

verify-go-binary.mjs

test: harden verification fixtures and runtime coverage

2026-10-14 08:59:27 +08:00

verify-grok-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-http3-network-captures.mjs

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

verify-il2cpp-metadata.mjs

feat(il2cpp): link native methods and export Ghidra seeds

2026-10-20 21:56:54 +08:00

verify-jeb.mjs

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

verify-linux-setup-e2e.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-mcp-registry-metadata.mjs

feat(electron): add autonomous Electron runtime analysis (#464)

2026-08-05 19:07:46 +08:00

verify-module-boundaries.mjs

test: harden verification fixtures and runtime coverage

2026-10-14 08:59:27 +08:00

verify-native-agent-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-native-calls.mjs

fix(ci): validate artifact MCP replies against named schemas (#6021)

2026-10-21 23:28:12 +08:00

verify-native-ui.mjs

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

verify-omp-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-opencode-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-package-artifact.mjs

feat(native): add investigation features (#486)

2026-09-30 00:41:05 +08:00

verify-package-capabilities.mjs

test(package): select the intended Hopper smoke-test provider

2026-10-14 09:09:02 +08:00

verify-package-discovery.d.mts

fix(verify-package): read Hopper installer applicability from its owner (#2973)

2026-10-14 03:19:45 +08:00

verify-package-discovery.mjs

fix(verify-package): read Hopper installer applicability from its owner (#2973)

2026-10-14 03:19:45 +08:00

verify-package-environment.d.mts

fix(test): use direct Node launcher on macOS

2026-07-24 03:31:26 +00:00

verify-package-environment.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-package-evidence.mjs

refactor(adapters): split oversized provider workflows

2026-07-18 05:49:14 +00:00

verify-package-install.mjs

fix(verifiers): launch npm through Node on Windows (#4153)

2026-10-15 23:12:29 +08:00

verify-package-managed.mjs

test(managed): include shared dossier fixture in artifact inputs

2026-10-10 04:09:45 +08:00

verify-package-mcp.mjs

test(mcp): align completion checks with provider readiness

2026-10-12 18:44:02 +08:00

verify-package-pack.mjs

perf(mcp)!: default to compact input schema advertisements (#5975)

2026-10-22 00:17:11 +08:00

verify-package-platform.d.mts

fix(package-verifier): reject overview responses without a procedure count (#2936)

2026-10-14 03:06:53 +08:00

verify-package-platform.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-package-prompts.mjs

test(mcp): align completion checks with provider readiness

2026-10-12 18:44:02 +08:00

verify-package-setup-plan.d.mts

fix(ci): correlate ownership trace threads and preserve setup failures

2026-10-20 00:05:22 +08:00

verify-package-setup-plan.mjs

fix(ci): correlate ownership trace threads and preserve setup failures

2026-10-20 00:05:22 +08:00

verify-package-setup.d.mts

fix(verifiers): require positive ownership and restore cleanup coverage

2026-10-14 09:47:57 +08:00

verify-package-setup.mjs

fix(ci): correlate ownership trace threads and preserve setup failures

2026-10-20 00:05:22 +08:00

verify-package-unknown-provider.mjs

refactor(adapters): split oversized provider workflows

2026-07-18 05:49:14 +00:00

verify-package-update.mjs

fix(setup): resolve the configuration MSIX Claude Desktop reads (#2426)

2026-10-13 22:04:22 +08:00

verify-package.mjs

ci: separate fast feedback from full qualification

2026-10-13 17:09:53 +08:00

verify-packaged-ghidra-windows.mjs

perf(ghidra): aggregate binary overview at the provider boundary (#4754)

2026-10-17 10:44:24 +00:00

verify-packaged-wasm-artifact.mjs

fix(windows): retry owned runtime cleanup on sharing conflicts

2026-10-16 03:13:10 +08:00

verify-packed-bridge.d.mts

fix(verifiers): read packed bridge without extraction

2026-10-17 10:35:31 +00:00

verify-packed-bridge.mjs

fix(verifiers): read packed bridge without extraction

2026-10-17 10:35:31 +00:00

verify-packet-capture.mjs

test(pcap): verify UTC metadata against authored capture records

2026-10-18 07:40:35 +08:00

verify-pcap.mjs

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

verify-published-package.mjs

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

verify-qlog-captures.mjs

feat(browser): inspect retained aioquic qlog JSON captures

2026-10-13 03:24:05 +00:00

verify-qwen-client.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

verify-real-browser.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

verify-real-cutter.mjs

fix(verify): request command JSON for Cutter inspection

2026-10-18 07:34:08 +08:00

verify-real-electron.mjs

fix(electron): attribute unresolved paths to selected inputs

2026-10-13 04:12:40 +08:00

verify-real-ghidra-6502.mjs

feat(ghidra): support raw NMOS 6502 analysis (#2079)

2026-10-13 21:13:01 +08:00

verify-real-ghidra-address-context.mjs

perf(ghidra): aggregate binary overview at the provider boundary (#4754)

2026-10-17 10:44:24 +00:00

verify-real-ghidra-assertions.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

verify-real-ghidra-com.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-decompiler-failure.mjs

fix(ghidra): preserve partial dossiers on decompiler failure (#4650)

2026-10-20 12:08:08 +00:00

verify-real-ghidra-dos.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-function.mjs

perf(ghidra): omit redundant raw results (#5355)

2026-10-20 05:14:33 +00:00

verify-real-ghidra-inventory.mjs

perf(ghidra): omit redundant raw results (#5355)

2026-10-20 05:14:33 +00:00

verify-real-ghidra-m68k.mjs

feat(ghidra): support raw big-endian m68k analysis (#4018)

2026-10-16 23:57:34 +08:00

verify-real-ghidra-mips-relocatable.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-mips-shared.mjs

feat(ghidra): admit verified MIPS16 shared ELF images

2026-10-12 07:50:31 +08:00

verify-real-ghidra-mips.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-nativeaot.mjs

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

verify-real-ghidra-noreturn.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-ppc.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-raw.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-riscv.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-swift.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-switch-assertions.mjs

fix(ghidra): recover evidenced switch cases and default targets (#579)

2026-10-05 22:54:17 +08:00

verify-real-ghidra-switch-controls.mjs

chore: migrate formatting to Oxfmt (#615)

2026-10-06 01:59:19 +08:00

verify-real-ghidra-switch.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-windows.mjs

perf(ghidra): omit redundant raw results (#5355)

2026-10-20 05:14:33 +00:00

verify-real-ghidra.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-hopper-deadlines.mjs

fix(hopper): own Mach-O preparation through cleanup retry

2026-10-21 06:12:09 +08:00

verify-real-hopper-fat.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-real-hopper-linux.mjs

test(hopper): repair Linux demo setup and native verification (#2638)

2026-10-13 14:39:18 +08:00

verify-real-hopper.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-real-ida.mjs

fix(ida): own registration reads and bind selected configuration

2026-10-21 01:00:00 +08:00

verify-real-kuna.mjs

fix(kuna): own version-probe processes through output and cleanup

2026-10-21 00:09:34 +08:00

verify-reconstruction-readiness.mjs

perf(mcp)!: default to compact input schema advertisements (#5975)

2026-10-22 00:17:11 +08:00

verify-recorded-crash.mjs

fix(process): settle native exit and repair ownership verification (#5249)

2026-10-20 02:01:00 +08:00

verify-release-artifact.mjs

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

verify-release-checkpoint.mjs

fix(release): validate frozen checkpoint versions and breaking notes

2026-10-08 10:13:05 +00:00

verify-repository-skill.mjs

fix(verifiers): launch npm through Node on Windows (#4153)

2026-10-15 23:12:29 +08:00

verify-signal-recording.mjs

fix(signals): report unknown decoder help IDs as invalid input (#5858)

2026-10-21 04:57:28 -07:00

verify-solidity-metadata.mjs

feat(evm): inspect lossless Solidity terminal CBOR metadata (#2790)

2026-10-13 21:55:30 +08:00

verify-test-discovery.mjs

fix(verify): report final success only after resource cleanup

2026-10-09 04:12:49 +08:00

verify-test-temp-hygiene.mjs

fix(tests): preserve temporary fixture ownership

2026-10-18 11:34:44 +00:00

verify-wasm-artifact.mjs

feat(wasm): make command deadlines adjustable with recovery guidance (#5798)

2026-10-21 15:00:05 +08:00

verify-wasm-interface-comparison.mjs

feat(wasm): compare retained core-module interfaces (#2464)

2026-10-13 23:49:04 +08:00

verify-web-network-captures.mjs

feat(analysis-view): project an environment manifest from web network captures (#4954)

2026-10-19 07:07:37 +08:00

verify-website.py

fix(docs): resolve link roots before containment checks

2026-10-16 06:46:24 +08:00

verify-windows-native-artifact.mjs

fix(formats): preserve high bits in remaining magic-byte checks (#2384)

2026-10-13 20:54:37 +08:00

verify-windows-native-inspection.mjs

fix(windows): retain unpublished runtimes after cleanup failure

2026-10-15 08:16:22 +08:00

verify-windows-native.mjs

fix(ci): keep Windows ACL observation in SID form (#5941)

2026-10-21 20:43:56 +08:00

verify-windows-package.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

website_i18n.py

fix(website): use Noto Sans KR for Korean text (#3821)

2026-10-17 00:22:09 +08:00

website.py

feat(website): add contributors and complete the Greek edition (#3520)

2026-10-14 16:21:24 +00:00

windows-capabilities.mjs

feat(ghidra): define the Windows P0 admission boundary

2026-07-17 03:05:19 +09:00