rea/release-notes.md

🤖 I have created a release beep boop

0.4.0 (2026-10-25)

  BREAKING CHANGES

• analysis: analyze_function now defaults to the compact summary view instead of the complete dossier inline. Pass detail: "complete" for the previous behavior.
• cli: Accessibility node value can also be a JSON number or boolean. Strings and null retain their prior meaning.
• native: Accessibility node value can also be a JSON number or boolean. Strings and null retain their prior meaning.
• cli: export row-oriented results as JSON Lines (#5629)
• apple: Keyed archives that previously used authored objectID or object-id graph identities now use decimal table UIDs. Authored values remain attributes; ibtool and native NIBArchive identities retain their existing source semantics.
• instrument-with-frida JSON now returns the canonical Evidence record directly. Read normalized_result.cleanup_error instead of the earlier top-level cleanup_error wrapper field.
• reconstruction: ID-array reconstruction proof records no longer qualify for verified or ready ledgers. Producers must supply implementation and revision bindings with individual claim outcomes; ledger diagnostics now distinguish inapplicable, unavailable, and failed proof.
• cli: inspect_macho import names can be null when identity is ambiguous. Use raw_name for the observed expression and name_status to distinguish it from an exact symbol name.
• macho: inspect_macho import names can be null when identity is ambiguous. Use raw_name for the observed expression and name_status to distinguish it from an exact symbol name.
• runtime: Node versions below 22.23.4, 24.22.1 and 26.12.1 are no longer supported. Upgrade Node before installing or updating REA; the installer does not upgrade Node.
• browser: legacy hashed browser storage remains readable but comparisons return unknown until both sides are recaptured.
• environment: environment-serve answers read tools from the derived state and does not serve write tools unless --replay-only is given; the stop summary reports state instead of state_evidence_id.
• environment: environment-serve answers read tools from the derived state and does not serve write tools unless --replay-only is given; the stop summary reports state instead of state_evidence_id.
• mcp: MCP input advertisements default to compact. Set REA_MCP_INPUT_SCHEMA_PROFILE=full for complete advertised guidance and nested constraints.
• browser: console event argument_types may now be null, and console text_capture.status may now be "unavailable", when the CDP producer omits or malforms the argument inventory.
• reconstruction: summary.by_evidence_authority keys are now Evidence authorities (shipped-artifact, controlled-replay, historical-reference, external-service, analyst-inference) instead of source states. The previous state counts move to the new required summary.by_source_state. Ledger closure digests change accordingly.
• native: Swift conformance type_name and protocol_name can be null when names cannot be resolved; consumers must use typed type_binding and protocol_binding evidence. MachoImportBinding replaces the former Objective-C-specific binding type and schema.
• browser: WebSocket event opcode is nullable and numeric values are restricted to the four-bit protocol range.
• resources: resource-only observations may have a null Evidence subject and null executable target digests. Clients must use resource_root and reported per-resource provenance instead.
• browser: console event timestamps may now be null when the protocol does not provide a finite number.
• browser: observe_web_session timeline timestamps can be null when the producer supplies no comparable timestamp. Consumers must handle unknown time explicitly.
• reference: Partial reference-source reader results report failed root enumeration in rootFailure instead of a failed directory child at path ".". Historical source graphs preserve the root failure as a top-level limitation.
• process: Filesystem enumeration omission reasons now also include entry_unavailable and identity_changed. Clients validating the old literal reason must accept the expanded capture schema.
• apktool: Numeric legacy locale selectors such as es-r419 are rejected. Use es-419 or b+es+419. Two-letter region selectors remain supported.
• plist: Unresolved XML scalar values now use $plist_type unknown wrappers with element, literal and reason. This replaces the former real/null unknown marker and malformed scalar prefix fallback. Supported extended UTC years now preserve their timestamp.
• native: failed or cancelled native UI scenarios now return typed errors with the collected report in partial_observation instead of successful reports containing failed or cancelled steps.
• providers: binary_session candidate availability can be unknown during owner finalization. Consumers must handle this state; the internal session status API is now asynchronous.
• native: Swift symbol address can now be null when the provider has no location. Clients consuming swift_symbols must handle an unknown address. The original provider value is retained in optional evidence.reported_address.
• hopper: Older Linux Hopper builds admitted by the fixed allowlist now require retained publisher-signed package evidence or an approved update to the current public demo. Update explicit HOPPER_LAUNCHER_PATH values when migrating; the live feed exposes only its current release.
• adb: inspect_adb_package version_code is now a decimal string ("45") instead of a JSON number (45). Read it as a string, or parse it with BigInt when numeric comparison is needed.
• evidence: Inventory Evidence must explicitly report integrity_contradictions, and browser capture Evidence must report every resolved budget. Caller input defaults remain supported; stored observations are never filled with inferred defaults.
• browser: Browser capture results require resolved limits, event families, and omission facts. Caller-selected budgets replace hidden retention ceilings; admitted content reads queue behind bounded concurrency.
• artifacts: Artifact inventories require scoped coverage. Obsolete coverage_status and prose-based coverage inference are removed. Inspection carriers authenticate every retained inventory substep.
• evidence: Evidence and analysis snapshots require explicit nullable relationship coverage and include it in their identity commitments. Historical records without the field are rejected; saved files are not migrated.
• managed: unresolved managed/native verification results may retain a non-null matched_native and candidate facts when module identity is unknown. Consumers must use status and reason rather than assume unresolved observations are empty.
• adb: install_adb_package now requires replace_requested and exposes replaced as nullable rather than claiming the selected mode was an observed replacement.
• identity: server.command_path may be null when the invocation path is unavailable. Registration and setup statuses, and doctor classifications, may report unknown.
• providers: binary_overview segment length is null when Hopper coordinates do not establish a finite same-address-space extent. Consumers must preserve this unknown instead of treating it as zero or a saturated value.
• providers: MIPS targets with unresolved GNU ABI attributes and saved Hopper databases on macOS are refused rather than advertised as supported.
• cli: keep a selected JSON null in --filter-output output (#2333)
• runtime: attached fields in JavaScript runtime, browser, and Electron target discovery and inspection results may be null when discovery does not report attachment state.
• sourcemaps: Browser source-map original and mapping rows expose null for unavailable source names instead of inventing an unknown-source string. New index fields are optional when reading older retained evidence.
• analysis: get_call_graph normalized_result now contains { graph, limitations }; traversal-depth groups are under graph.
• mcp: binary_session no longer includes server_identity.catalog.tools; tool_availability and provider capabilities use grouped facts documented in docs/mcp-contracts.md.
• browser: inspect_web_page network.websocket_events is replaced by network.websocket_connections, whose records contain request_id, url, and events. Frame payload_bytes is nullable when decoding cannot establish its size. No legacy alias is retained.
• web: WebScriptExportError accepts error context and residual paths in an options object.
• reference: Reference source readers and imports require an ArtifactResourceScope. VCS metadata reads return Result, and CLI import failures include observed details and partial evidence.
• javascript: readJavaScriptArtifactFiles now requires ArtifactResourceScope as its third argument; the optional abort signal is fourth.
• publication: retain cleanup owners across export workflows
• artifacts: Injected ASAR unpacked handles expose fd and read instead of createReadStream.
• artifacts: ArtifactResourceScope file-handle owners require OwnedFileHandle. Root inventory sources retain their single cleanup owner.
• artifacts: Direct artifact inventory/extraction and JavaScript analysis APIs require an explicit caller-owned ArtifactResourceScope. CLI and MCP input contracts are unchanged.
• reference: Pattern-based reference graph exclusions require pattern and distinguish project-ignored and default-ignored reasons. Re-import saved graphs that omit matching patterns.
• process: process scenarios whose initial or resized terminal exceeds 1,000,000 combined visible-plus-scrollback cells are now rejected before launch.
• skills: Optional verify:agent reports now use schemaVersion 4. Consumers must accept expectedFirstTool: null and targetClarificationPassed for missing-target scenarios. Production CLI/MCP contracts are unchanged.
• process: Captures with custom normalization patterns use literal-replacements-v1 and cannot be compared with legacy unversioned pattern captures. Capture both sides with the same replacement semantics; legacy captures remain readable and captures without patterns are unaffected.
• artifacts: Artifact inventory edges no longer include child_artifact_id or logical_path; read them from the occurrence named by occurrence_id. The graph commitment changes, so inventory Evidence recorded by earlier versions no longer validates.
• javascript: Semantic graph nodes and relations no longer include identifier_strategy, and relation IDs no longer hash that constant. Evidence recorded by earlier versions does not validate against the new semantic graph schema.
• javascript: New analyses use digest-based IDs for long or reserved-prefix event names and shorter event/listener display labels. Select IDs from the parent graph and read exact names from event_name properties. Stored graphs and their original IDs remain accepted for semantic tracing.
• javascript: New analyses use compact endpoint labels and digest-based IDs for long or reserved-prefix endpoint keys. Select IDs from the parent graph and read full values from endpoint properties. Previously stored graphs retain their original identities and remain valid workflow inputs.
• javascript: Newly produced semantic literal node IDs use value-sha256 role keys, and string labels read "string literal". Read exact values from properties.value and obtain node IDs from the selected parent graph. Previously stored Evidence and its original IDs remain valid.
• browser: JSON shape paths now contain typed property and array-element segments. WebMCP input_schema_shape is replaced by input_schema and input_schema_sha256, retaining declared examples and defaults.
• process: Filesystem digest omission entries now require system_code; budget and changed-file omissions use null, and unavailable-file omissions preserve the operating-system error code.
• contracts: Provider analysis outputs must explicitly supply metadata previously repaired with defaults; unsupported nullable facets must be reported as null.
• javascript: Semantic graph facts now store evidence context IDs and locations. Graph and semantic trace results require an inline evidence_contexts table.
• contracts: source-map URLs now live in target observations selected by declared_url_sha256, and doctor skill identity no longer emits installed_catalog_digest. Use the documented observation join and identity.skill.state instead.
• javascript: remove the never-incremented truncated_scopes statistic from JavaScript application analysis results and schemas.
• native: Objective-C attribute tokens now contain only name and value. Properties report nullable atomicity and readonly facts; class flags, ivar counts, and method requirement flags are nullable when unobserved.
• captures: Historical captures without current producer accounting or transaction identity, and web diffs missing accessibility or storage dimensions, are rejected.
• reference: Historical source symlinks with unreadable or unknown target_state require target: null. Placeholder target strings are rejected.
• domain: function comparison results no longer advertise the unreachable truncated state or counter.
• javascript: projected return fields require explicit presence and semantic object operations carry full property paths.
• obsolete Evidence envelopes, session aliases, incomplete snapshots, and missing normalized producer facts are no longer accepted.
• process: require current captures and preserve cleanup failures
• restore caching, preserve failures, and verify fixture claims (#1211)
• hopper: Hopper regex mode uses ECMAScript Unicode syntax instead of Python re. Matching runs in a cancellable worker with a five-second deadline; literal mode keeps Unicode casefold matching.
• hopper: remove set_current_document. Use open_binary to switch targets; document arguments are scoped to the active target.
• contracts: require absolute local paths for remaining caller-supplied file inputs (#1004)
• contracts: require absolute local paths for session filesystem inputs (#948)
• native: preserve incomplete native UI captures (#991)
• android: Android analysis now requires a full JDK 17 or newer with its compiler module for the packaged Java source bridge.
• Managed comparison metadata adds exact-signature matching and its count, and name_matching now reports exact-signature-fallback.
• setup: unscoped setup refreshes only existing REA-owned registrations. Use --all-detected to configure every detected client. Setup JSON contains a compact doctor summary; use rea doctor for full diagnostics. Cancellation and successful dry runs now exit successfully.
• Remove controlled replay, Node characterization, finite replay-machine, managed runtime planning, and redundant string-tracing tools. Retire process replay, shims, reactive scenarios, custom checkpoints, and active browser replay and origin-scope inputs.
• tools: Removed permission configuration and policy commands, approval fields, filesystem scope inputs, and fixed confirmation options. Process capture inherits the host environment and accepts command names; callers must refresh tool schemas and migrate removed fields.
• export_evidence_bundle now requires a filesystem path and no longer returns an inline bundle.
• mcp: require Evidence for managed reconstruction
• mcp: comparison tools now require session-owned Evidence IDs or approved bundle paths, and structured Evidence results use compact references.
• contracts: batch_decompile, get_call_graph, and find_xrefs_to_name now return structured discriminated output shapes.

Features

• adb: complete ADB device support for Android reverse engineering (#1552) (fef6f73)
• add cross-platform installation lifecycle (cc6a955)
• add cross-platform installation lifecycle (e651cb6)
• add evidence-backed process investigations (cc8681a)
• add FreeBuff agent support for REA setup (#2736) (69a2faa)
• add Frida instrumentation support (#1359) (4a4ae9b)
• add guided MCP workflow prompts (08d5b91)
• add guided MCP workflow prompts (24c3adb)
• add Hermes as a supported MCP client (#1403) (f970b88)
• add managed characterization and coverage closure (1943496)
• add managed characterization and reconstruction coverage (02c913b)
• add passive website reverse engineering (9986971)
• add passive website reverse engineering (2c1ceab)
• add persistent cross-version investigation workspaces (c52eb46)
• add persistent cross-version investigation workspaces (41366ed)
• add runtime reconstruction roadmap workflows (1dbb157)
• add web and Electron reverse-engineering workflows (be76f80)
• analysis-view: add native inventory summaries and pages (#5378) (2538214)
• analysis-view: project an environment manifest from web network captures (#4954) (291059a)
• analysis-view: project rich captures from Evidence files and template path pairs (#5293) (f93a033)
• analysis-view: report observed query parameter names (#2982) (dd36b4a)
• analysis-view: share templated positions across manifest tools (#5664) (ea35347)
• analysis: add bounded memory and call tracing (8e7709d)
• analysis: add opt-in retained inventory and WASM views (#2122) (58fb372), closes #2016
• analysis: add provider-neutral persistent snapshots (c439b9e)
• analysis: default function MCP output to retained summaries (#5660) (1a48a82)
• analysis: harden agent workflows and evidence boundaries (883db91)
• analysis: persist snapshots and close Hopper reliably (c6407ef)
• android: add opt-in package summaries and retained manifest views (f254f5a)
• android: expose exact DEX descriptors and direct invoke sites (#2439) (c45d912)
• android: integrate static APK analysis with headless JADX (#738) (904d03e)
• android: make the JADX operation deadline configurable (#4466) (f433786)
• android: project a structured manifest component inventory (#5025) (f2fa7f6)
• apk: inspect signing declarations with retained fact queries (e93e3b1)
• apktool: decode Android resource tables through a caller-supplied launcher (#1556) (96fd98c)
• apktool: share one APK resource decode across selected locale tables (#4777) (#4804) (6668424)
• apple: inspect IPS crash reports (#6511) (781760a)
• apple: project macOS bundle anatomy in application graphs (88c940b)
• apple: project macOS bundle anatomy in application graphs (dd3e7ae)
• application: add cross-layer graph workflows (778b995)
• application: add isolated JavaScript replay (d86231a)
• application: wire Android and Apple inventory graph tools (#852) (e0fd820)
• artifact: reconstruct JavaScript application structure (aa46abf)
• artifacts: add approved native DMG traversal (24d000a)
• artifacts: add provider-neutral inspection (d997728)
• artifacts: inspect and extract Godot PCK with retained facts (#3634) (5fa4def)
• artifacts: inspect and extract PyInstaller archives (afa5da7)
• artifacts: inspect PE resource identities and payload ranges (#1482) (905e486)
• artifacts: inventory and extract Node.js single executable application blobs (#7000) (ed79bf9)
• artifacts: make ASAR header admission configurable (#6209) (8451b96)
• artifacts: project mobile application inventories (c6a1a93)
• artifacts: project mobile application inventories (d36b385)
• artifacts: support MSIX and AppX packages (6e6cce1)
• artifacts: trace Mach-O dylib resolution in bundles (78d594c)
• artifacts: trace Mach-O dylib resolution in bundles (11b7f91)
• artifacts: triage desktop installation directories (#5207) (b4938ae)
• binary-layout: admit ELF32 i386, ARM and MIPS layout profiles (#7052) (2c38bec)
• browser: attach passive tools to browsers without HTTP discovery (#2346) (62c8b3d), closes #2288
• browser: attribute native execution and listener sources (#917) (b5afa5f)
• browser: capture controlled Playwright scenarios (1ac3118)
• browser: capture correlated network content and lifecycle evidence (#797) (f9eaf05)
• browser: compare scenario and storage evidence (f27dd74)
• browser: inspect historical web network captures (#992) (2bf3663)
• browser: inspect retained aioquic qlog JSON captures (bb154d1)
• browser: trace captured website module imports (#879) (01be082)
• browser: trace captured website source-map locations (#897) (f430c41)
• bytecode: add JVM and Python bytecode providers (1a75f8d)
• bytecode: add JVM and Python bytecode providers (4e0127d), closes #367
• capture: decode selected protobuf and gRPC bodies (#5031) (0134732), closes #4986
• captures: discover installed protocol and field definitions (#2496) (9c34c09)
• captures: inspect recorded packets with bounded TShark delivery (#2318) (f611d8c)
• captures: make the HAR/SAZ/qlog decoder heap configurable (#6299) (306ed79)
• cli: accept JavaScript source selections from a JSON array or file (#5029) (e5965ad)
• cli: accept stdin for structured JSON request documents (#5486) (#7040) (4b045e8)
• cli: add explicit package-runner setup wizard (891a11f)
• cli: add guided local onboarding (8ca3db8)
• cli: add self-upgrade command (c004220)
• cli: add self-upgrade command (0d77a9f)
• cli: align terminal workflows with MCP (b1912b1)
• clients: register Factory Droid during setup (#2309) (9e019ad)
• clients: register Grok Build and Grok Bot during setup (#1134) (08561e0)
• clients: register Qoder CLI during setup (#1572) (1097693)
• clients: register Qwen Code during setup (#1415) (aa23ec8)
• clients: register Trae during setup (#1573) (bfa805d)
• clients: register ZCode during setup (#1564) (51d6c87)
• cli: export row-oriented results as JSON Lines (#5629) (5d2c8c2)
• cli: improve setup onboarding (4851449)
• cli: improve setup onboarding (16002ff)
• cli: report version and runtime with an explicit output format (#6530) (169512a)
• cli: summarize committed reference-source inventories (#2768) (93e29d2)
• cli: summarize managed members with durable Evidence paging (#5167) (57fd3ea)
• cli: support package-name setup wizard (1b90e7f)
• complete evidence-backed roadmap workflows (1a0931b)
• complete REA remediation program (d25e98c)
• config: make the regex matching deadline configurable (#6267) (c7efd3a)
• conformance: add portable conformance export package format (91fb87d)
• conformance: add portable conformance export package format (4ee30e4)
• core: add typed policy and integrity contracts (190efca)
• diagnostics: report a byte entropy profile for one local file (#2331) (7aa1b51)
• doctor: admit the Windows x64 Ghidra boundary (32dda0c)
• domain: add versioned JavaScript Application Graph (2ca5672)
• dotnet: add BYO ILSpy oracle diagnostics (aa200ce)
• dotnet: add managed artifact triage (c251c38)
• dotnet: add managed member comparison (55794d6)
• dotnet: add managed member inspection (98cad37)
• dotnet: add managed native boundary inspection (466b1bb)
• dotnet: add managed runtime correlation planning (5f66cfd)
• dotnet: import managed reconstructions (c506664)
• dotnet: verify managed native boundaries (8cbc125)
• electron: add autonomous Electron runtime analysis (#464) (8f229ed)
• electron: inspect packaged Electron fuse state without execution (#2399) (bcc1415)
• electron: map static process and IPC boundaries (3fa2304)
• electron: reconcile static artifacts with passive runtime (8c67dbd)
• electron: resolve stable local constant window options (d72d856)
• elf: decode Zstandard section-name tables (#6987) (fcebd79)
• elf: inspect Linux kernel module metadata (#7010) (dba8a31)
• elf: inspect PT_NOTE and SHT_NOTE tables (#4837) (2edf3b2)
• environment: answer list filters, search, sorting and paging from the state (293832b)
• environment: apply evidence-gated write effects to the served state (#5600) (538017d)
• environment: build agent environments from a prompt (#6946) (02e0497)
• environment: build environments from browser scenario captures (#5182) (bf1eeee)
• environment: compare an environment with probe captures of its application (#5699) (edccb43)
• environment: explain values an application derives from other fields (#7025) (38719a6)
• environment: export an environment manifest as an agent environment bundle (#4999) (7a0c47b)
• environment: extend evidence-gated write coverage (5375ff0)
• environment: extract the initial state a capture's reads observed (#5319) (3fca2e0)
• environment: give more write tools a state target (#6385) (977c972)
• environment: learn creates from every call, with sorted arrays and referenced entities (#7034) (aba487e)
• environment: list every entity on a list's whole lines (#5787) (4043e71)
• environment: model application-assigned write values (7ec9b6e)
• environment: preserve view-specific written clock spellings (957bcfa)
• environment: render more read tools from the state and describe responses (#5352) (2e6b38c)
• environment: serve an environment manifest as a replay environment (#4975) (10f1994)
• environment: serve creates whose answers show less than reads, and whole-object updates (#7080) (113679c)
• environment: serve the environment state by default (#5351) (166fb08)
• environment: serve writes by what their recordings show (#6897) (d361c53)
• environment: time browser scenario records so scenario environments learn a write clock (#6967) (69f99c5)
• erlang: inspect BEAM IFF chunks and tables (#4833) (bfba998)
• erlang: query selected BEAM table facts (#6943) (ead9fdc)
• errors: add caller-safe typed error projections (3be439c)
• evidence: accept exact retained application references (#734) (d0f3480)
• evidence: discover retained records without full payloads (#1682) (17f7040)
• evidence: generate verifier completion ledgers (c02d33f)
• evidence: generate verifier completion ledgers (f5b3e22)
• evm: add retained interface summary delivery (#2308) (f76163c), closes #2016
• evm: inspect lossless Solidity terminal CBOR metadata (#2790) (48a683a)
• evm: inspect offline bytecode interfaces through EVMole (#1051) (7af7bc8)
• evm: retain lossless terminal CBOR metadata (48a683a)
• evolve REA analysis platform (4f18e26)
• expand reactive capture and package analysis (9da1794)
• fiddler: inspect native SAZ captures (a2d8b94)
• firmware: attribute hardware MMIO peripheral memory regions in native disassembly (#5348) (ee0ec02)
• firmware: inspect flattened devicetree blobs (#7009) (b4ba96a)
• firmware: integrate Binwalk and Unblob analysis (5a7c769)
• firmware: make analysis deadlines recoverable per call (aa53c06)
• flutter: identify Dart snapshot builds and inspect AOT payloads by pure APK parsing (#1582) (e4d3e13)
• ghidra: add atomic function annotation edits (#709) (9bab553)
• ghidra: add authenticated Windows loopback transport (629ffc3)
• ghidra: add DOS MZ analysis and complete function extents (#556) (4f099a1)
• ghidra: add function analysis and conformance (d8321de)
• ghidra: add private headless provider session (f0e625d)
• ghidra: admit 32-bit big-endian PowerPC ELF (#1747) (c86b09a)
• ghidra: admit ARM PE targets on Windows (#3965) (2b5ee72), closes #2186
• ghidra: admit bounded PSP ELF through installed Allegrex (#1599) (e4407db)
• ghidra: admit explicit DOS COM analysis (#702) (5bcb664)
• ghidra: admit recordless legacy MIPS32 ELFs with a pinned 32-bit language (#1898) (a4b8e9c)
• ghidra: admit relocatable MIPS32r2 ELF objects (#1950) (290d301)
• ghidra: admit RISC-V ELF analysis through a pinned generic lane (#2151) (0baad58)
• ghidra: admit set_address_name and set_addresses_names (#1635) (6e0d5d6)
• ghidra: admit soft-float MIPS32r2 ELF with integer-register float storage (#1949) (5e219de)
• ghidra: admit verified MIPS16 shared ELF images (e9fe643), closes #1851
• ghidra: analyze GameCube/Wii DOL executables through Ghidra (#6240) (cab78de)
• ghidra: apply validated analyzer overrides before analysis (9878bb7)
• ghidra: bind imports to admitted target bytes (be19c3f)
• ghidra: bound one procedure's decompile without closing the session (#5662) (a062529)
• ghidra: configurable import language and analysis seeds (#1667) (af88184)
• ghidra: decode Swift String literals in function dossiers (#2049) (8823c55)
• ghidra: define the Windows P0 admission boundary (6b1fd16)
• ghidra: enable Windows x64 read-only analysis (#699) (26881da)
• ghidra: implement read-only inventory operations (b1c07dd)
• ghidra: inspect NativeAOT PE metadata read-only (76d8f68)
• ghidra: inspect Windows headless installations (86e44be)
• ghidra: integrate optional NativeAOT metadata recovery (#748) (fb679b6)
• ghidra: launch bounded Windows headless sessions (bc0fb45)
• ghidra: make the startup deadline configurable (#974) (d84bc8f)
• ghidra: recover signed AArch64 relative jump tables (#1592) (3749cce)
• ghidra: support native PE DLLs on Windows (a957f39)
• ghidra: support native PE DLLs on Windows (be6863e)
• ghidra: support native x86 PE applications on Windows (#1030) (c6dad93)
• ghidra: support raw big-endian m68k analysis (#4018) (d62d308)
• ghidra: support raw NMOS 6502 analysis (#2079) (9c14999)
• ghidra: verify DOS load images and expose memory evidence (#697) (a6a8f67)
• go: inspect embedded binary build metadata (#1363) (a1b5d51)
• gpu: inspect static CUDA and HIP code objects (#5813) (efab044)
• harden authority and runtime conformance boundaries (b537ebf)
• harmony: project HarmonyOS package inventory evidence (#1447) (f2150eb)
• hopper: report bridge progress diagnostics (7a43420)
• ida: add read-only GUI and headless MCP providers (#754) (8238232)
• ida: resolve containing procedures and report the admitted program as the document (#2374) (5f8af4e)
• ida: support optional native IDA Free MCP in attached mode (#1544) (d1aaeee)
• identity: derive MCP surface metadata (2722722)
• identity: rename package and CLI to REA (3d70812)
• il2cpp: inventory Unity IL2CPP global-metadata images, types and methods (#3807) (8331365)
• il2cpp: link generic method instances behind --generic-instances (#5785) (3ce3117)
• il2cpp: link native methods and export Ghidra seeds (52d1a72)
• il2cpp: read member names, string literals and metadata versions 24 and 27 (#5326) (21e0c58)
• javascript: add binding and constant-value semantic IR (3ea8523)
• javascript: add binding and constant-value semantic IR (3d71bb5)
• javascript: add bounded semantic relation graph (b3939ea)
• javascript: add bounded semantic tracing (56c1a66)
• javascript: add filtered retained module reference views (ec394a2)
• javascript: add local semantic call flow (a26a1c7)
• javascript: add webpack and rspack runtime adapters (7bccb7c)
• javascript: add webpack and rspack runtime adapters (44c7017)
• javascript: analyze selected application sources (85c1d25), closes #1848
• javascript: compare source with shipped bundles (697be94)
• javascript: expose bounded semantic tracing (508a9cc)
• javascript: link assignment right-hand sides to their writes (#6206) (9df94a6)
• javascript: query retained application facts by exact path (#4265) (d9d085a)
• javascript: recognize tRPC procedures and GraphQL operations (#1670) (3a7a307)
• javascript: record Electron integrity mismatches (7915ee5)
• javascript: recover code-split bundles from multiple inputs (#1686) (12c4160)
• javascript: recover commonjs and esm module relationships (9766fc0)
• javascript: recover commonjs and esm module relationships (6c41791)
• javascript: recover readable modules with Wakaru (#848) (166dcd2)
• javascript: recover runtime semantic effects (38c883b)
• javascript: report observed export property presence (#1160) (45e3edc)
• javascript: resolve exact package import aliases (#1862) (d28b41e)
• javascript: retain queryable static route inventories (#6019) (7d0efef)
• javascript: return a retained summary view on request (#1568) (c19e15a)
• jeb: add JEB engine provider over its MCP interface (#1536) (749e587)
• kuna: add bounded call relationships and exact xrefs (c9f9b83)
• kuna: add cached string inventory and search (#4095) (7054bbb)
• kuna: add Kuna readiness, doctor and owned project cache (#3832) (933f216)
• kuna: serve procedures, pseudocode and assembly from Kuna exports (#3854) (c1fd496)
• make evidence bundles canonical MCP resources (1712e6d)
• managed: add retained metadata overview and pages (#2413) (82cfcee)
• managed: decode ldstr user strings in member inspection (#2162) (2652570)
• managed: name the declaring type of call and field targets (#2163) (91830f1)
• managed: project call and field-access edges into the application graph (#6260) (c9b4cae), closes #4056
• managed: project static evidence into application graph (6194c1a)
• managed: project static evidence into application graph (77178bb)
• managed: select declaring types in inspect_managed_members (a149d18), closes #1878
• mcp: add opt-in paging for retained unknown heads (9a18251)
• mcp: add opt-in streamable HTTP transport (#4955) (60bd646)
• mcp: add typed bounded analysis tools (893d2e2)
• mcp: compact input schema profile for size-capped providers (kimi-cli/Moonshot) (#1514) (b6ad1f2)
• mcp: derive an API surface view from retained web network captures (#1891) (880a603)
• mcp: expose progress resources and availability (da59299)
• mcp: harden contracts and evidence references (ee1cd40)
• mcp: land policy, resources, and typed contracts (8f79ee7)
• mcp: make MCP startup phase budgets configurable (#6304) (584937c)
• mcp: require Evidence for managed reconstruction (d36af5d)
• mcp: return structured typed tool results (eb38e4c)
• mcp: select views of retained analysis results (#1180) (db675f1)
• mcp: support runtime analysis limit recovery (#7049) (f3ed165)
• metadata: add deeper ObjC/Swift metadata and database save/licensing (4602efd)
• metadata: add deeper ObjC/Swift metadata and database save/licensing (d7a0753), closes #353
• mobile: add Android APK/AAB/DEX and iOS IPA static investigation providers (18624df)
• mobile: add Android APK/AAB/DEX and iOS IPA static investigation providers (fdeeb27), closes #366
• model: inspect GGUF and safetensors declarations (#5603) (98f4072)
• native: add inspection primitives, dispatch traces and approved UI observation (#500) (4fbc501)
• native: add investigation features (#486) (ed933d1)
• native: admit bounded MIPS ELF analysis through Ghidra (#1362) (bddddcc)
• native: admit raw binaries with caller-supplied architecture and entry (#1868) (7c207c7)
• native: decode chained fixups, binds, ObjC categories and properties (a657557)
• native: decode chained fixups, binds, ObjC categories and properties (3e24a72)
• native: decode Swift nominal type declarations from __swift5_types (#6257) (c02945b)
• native: export function pseudocode to resumable directories (#6170) (a91412a)
• native: expose typed incoming references at exact addresses (#1715) (cdd9fe7)
• native: inspect a universal Mach-O slice in Go and Rust metadata readers (#6219) (b928963)
• native: inspect API boundaries with evidence (521139d)
• native: inspect offline ELF layout through pwntools (#1037) (4fc6565)
• native: inspect oversized retained function dossiers via bounded views (a9ee236)
• native: inspect PE and ELF export tables without an engine (#6278) (933af60)
• native: inspect recorded crashes through pwntools and pwndbg (#1054) (163ee09)
• native: let callers raise the Apple dispatch metadata input budget (#6233) (3637205)
• native: match retained function inventories across builds (#5390) (1417bf9)
• native: observe function and Objective-C method calls under LLDB (1d13cef)
• native: observe function and Objective-C method calls under LLDB (9837203)
• native: open iOS-style and iOS-on-Mac wrapper app bundles (2ed89e6)
• native: open iOS-style and iOS-on-Mac wrapper app bundles (aeebba3)
• native: read embedded cargo-auditable Rust dependency lists (#2456) (0e6eca4)
• native: return a retained summary view of binary layouts on request (#1570) (5156ba4)
• native: search analyzed memory for masked byte patterns (#2341) (2a78763)
• objdump: select native disassembly by symbol (#5171) (3ea0d94), closes #5159
• package: add MSIX/MSI/AppX package, resource, and signature analysis (0ef1b91)
• package: add MSIX/MSI/AppX package, resource, and signature analysis (6c03f83), closes #363
• pcap: add bounded capture summaries through CLI and MCP (9581e06)
• pe: add broader PE/COFF/PDB static inspection (f942558)
• pe: add broader PE/COFF/PDB static inspection (94e6600), closes #362
• pe: inspect Authenticode certificate tables (#4830) (ca4ca65)
• pe: inspect import and delay-load tables (#6509) (4ef916d)
• pe: inspect TLS callbacks and load configuration (#7008) (3d84215)
• permissions: add scoped process capture elicitation (e6cfce3)
• process: add bounded reactive scenario domain (42f3b9c)
• process: add bounded reactive scenario domain (d34463c)
• process: add bounded replay state machines (fea965b)
• process: add bounded replay state machines (dc0c2e5)
• process: add deterministic capture v3 (d0e21f9)
• process: add deterministic capture v3 (5a361a6)
• process: add direct replay machine runner (3df9a07)
• process: add reactive capture scenarios (69761e9)
• process: bound a finalization interval before forced capture timeout (c1efa64)
• process: compare declared concurrent traces (d81745c)
• process: compare repeatable paired experiments (e9899c0)
• process: compare repeatable paired experiments (9ab7aa3)
• process: coordinate reactive capture effects (b874efd)
• process: coordinate reactive capture effects (db9a831)
• process: introduce evidence-safe capture v4 (ee4d284)
• process: make the regex worker heap request configurable (#6301) (9512a80)
• process: record global capture event order (8bcdb98)
• process: record provider and verifier run lineage (02b01d4)
• process: record provider and verifier run lineage (513fa29)
• process: replace procfs sampling with event-backed process-tree capture (a5e355a)
• process: replace procfs sampling with event-backed process-tree capture (d5d2e56), closes #332
• process: report live capture progress through CLI and MCP (706bba6)
• process: run finite-state replay during capture (820af60)
• process: run finite-state replay during capture (34c583a)
• process: support explicit stdin closure (205bf15)
• protocol: add custom TCP/UDP/IPC/XPC and auth-flow capture (1fb22b4)
• protocol: add custom TCP/UDP/IPC/XPC and auth-flow capture (6fa6f9b), closes #365
• protocol: add gRPC/Protobuf and JSON-RPC/MessagePack capture (54153ed)
• protocol: add gRPC/Protobuf and JSON-RPC/MessagePack capture (3f336fe), closes #364
• python: inspect CPython pyc headers and marshal code objects (#4826) (2c3dd94)
• python: query selected pyc code-object facts (#6928) (e246337)
• reconstruction: add obligation ledgers (9d48ca7)
• reconstruction: evaluate end-to-end readiness (38ff741)
• recorded-crash: decode AArch64 core register notes (#2505) (522b992)
• release: add contributor-aware release notes workflow (824ecf1)
• runtime: add passive V8 Inspector observation (8271650)
• server: advertise available tools dynamically (035e114)
• server: frame analysis-target content as untrusted data (#1908) (85e1242)
• session: add dynamic binary lifecycle (f32e718)
• session: add explicit provider registry and target binding (941d710)
• setup: add Kimi Code client support (#2744) (efc491a)
• setup: add WorkBuddy client support (#3041) (e049ef7)
• setup: expand agent integrations and verify updates (#577) (6256b68)
• setup: make installation explicit and safe (29d92ca)
• setup: make installation explicit and safe (3793889)
• setup: register DeepSeek Harness through setup, doctor and uninstall (#1929) (d9d2a17)
• setup: register OMP during setup (#1301) (8b4c359)
• setup: support Command Code MCP registration (#645) (7f1ae42)
• setup: verify installed skill catalog identity (b2d1f2a)
• signals: decode recordings with bounded sigrok output (#2339) (91b8f58)
• signals: discover installed decoders and option help (#2487) (4276aaf)
• skill: rename skill to reverse-engineer-anything (9356634)
• skills: improve Codex onboarding and task recovery (#1613) (2653b19)
• sqlite: inspect offline snapshots with selective evidence (#2271) (aeee507)
• sqlite: make worker deadlines adjustable with recovery guidance (#5818) (f801b2f)
• streamline agent integration and MCP routing (02cb20b)
• streamline agent integration and MCP routing (3e3d458)
• target: classify Windows PE admission metadata (24274fe)
• target: explain static WASM inspection after native rejection (1f17ac8), closes #1852
• update: update Bun global installations (#1735) (e4027e4)
• wasm: add opt-in first-call summary delivery (#2193) (0b71453)
• wasm: compare retained core-module interfaces (#2464) (911894d)
• wasm: inspect local artifacts with WABT (#1533) (ffaf2c1)
• wasm: make command deadlines adjustable with recovery guidance (#5798) (a5f982d), closes #5797
• web: export captured scripts for JavaScript application analysis (#801) (472b72a)
• website: add a blog for methods and project notes (b09d02d)
• website: add a persistent light and dark theme switch (4773c15)
• website: add a shared back-to-top link (5047373)
• website: add an Aegis APK code-generation showcase (0270dd5)
• website: add an Android showcase and clearer project prompts (6cc817e)
• website: add beginner examples and synchronized publishing (0fec65d)
• website: add beginner examples and synchronized publishing (#1203) (0fec65d)
• website: add contributors and complete the Greek edition (#3520) (569ef41)
• website: add Discord link beside GitHub badge (cc39fc5)
• website: add GitHub link with live star count (2f59287)
• website: add homepage navigation and faster reading paths (863674b)
• website: add homepage navigation and faster reading paths (c94f06d)
• website: add homepage navigation and faster reading paths (#1213) (863674b)
• website: add multilingual editions and translation workflow (a2d3338)
• website: add search metadata and automatic sitemap (99f257b)
• website: add search metadata and automatic sitemap (b8851cb), closes #1283
• website: clarify reverse engineering and showcase goals (e750c26)
• website: explain REA through a first investigation (5160d9b)
• website: explain REA with Calculator and a playable dinosaur lab (11b9f03)
• website: follow the system dark mode and fix small-screen text (#1894) (12ee785)
• website: introduce REA and the DX-Ball reconstruction (#906) (4e3953c)
• website: lead with the playable dinosaur example (19c52f5)
• website: link the Blog from the homepage introduction (cf6957e)
• website: show manual analysis beside a one-prompt workflow (291bc6f)
• website: simplify the reader journey and beginner setup (#3274) (7c962cc)
• windows: define native authority boundary (a1a6b42)

Bug Fixes

• adb: accept Android Java float spellings unchanged (42e7859), closes #6796
• adb: admit canonical device states and preserve malformed output (e1cd292)
• adb: bind transfer evidence to consumed snapshots (1342127)
• adb: count requested permissions that the device marks restricted (#2359) (15463bd)
• adb: count Unicode requested permissions (80d3fd4), closes #6584
• adb: count UTF-8 bytes in logcat total_bytes (#2212) (ec2d251)
• adb: delimit permission section by indentation (e907822)
• adb: derive push digest source from the parsed device digest (1f92c77), closes #5924
• adb: distinguish absent focus from missing declarations (3d028db)
• adb: distinguish reinstall intent from observed replacement (864314a), closes #3166
• adb: escape portable patterns for unicodeSets consumers (6543405)
• adb: evaluate the full activity start report (c89972c), closes #2225
• adb: improve shell output parsing accuracy (#5001) (15ec8e9)
• adb: keep a bare numeric wm density as the physical density (#4074) (bef3fbb), closes #3942
• adb: keep the device's refusal when a package change exits nonzero (#2344) (554ea76)
• adb: keep the exact Android long version code (#3485) (7666a48), closes #3368
• adb: mark unknown package coverage partial (9534e42)
• adb: mark unknown permission coverage partial (#4663) (9534e42)
• adb: normalize absent installer package sentinels (#4073) (7721d59)
• adb: own numeric declaration validation and diagnostics (667ab5a)
• adb: parse successful daemon notices from both output streams (57bb7ec), closes #3073
• adb: pass int intent extras to am without leading zeros (#6843) (f713087), closes #6807
• adb: preserve command failure target identities (8307ea3), closes #4641 #4643 #5051
• adb: preserve command owner cancellation outcomes (c4475d4)
• adb: preserve device paths and prevent destination collisions (55b6148)
• adb: preserve directory identities and share byte capture (3bdc873)
• adb: preserve display-scoped window focus declarations (7086768)
• adb: preserve empty properties and verbatim version names (bcd1f95)
• adb: preserve empty string activity extras (9051809)
• adb: preserve existing bugreport archives (#2221) (d80b55e)
• adb: preserve numeric intent and typed acquisition outcomes (57e3e0b)
• adb: preserve push target semantics (50241b3), closes #6566 #6567
• adb: preserve version probe failures during admission (0d22474)
• adb: refuse transfers when destination existence is unknown (61e6880), closes #4574
• adb: reject unsafe host file names when pulling one device file (#1962) (1d4c4eb)
• adb: remove false exclusivity from the push-file description (#2990) (9630c8f)
• adb: report an unparsed push checksum as unverified (#6010) (1f92c77)
• adb: report the device state when a push cannot probe the path (#2354) (2a61dea)
• adb: report unrecognized package rows from resolve-adb-packages (#5874) (5b014a7), closes #5843
• adb: retain and resolve owned hash cleanup (1bd5c5c)
• adb: retain cancellation at screen publication (461eb16)
• adb: retain malformed numeric listing evidence (0a91b6c)
• adb: retain refused activity launch reports (46111dd), closes #6528 #6527
• adb: retain rollback ownership and cancelled acquisition facts (1f7e279)
• adb: scope package uninstall requests to user zero (be0b2d1)
• adb: share actionable provider configuration refusals (c42232f)
• adb: share host configuration refusals with apktool (#1954) (39418ea)
• address MCP resource review feedback (f3b3fb0)
• address review nits from batch integration follow-ups (#818) (5a0e0ba)
• address setup, upgrade, and process test regressions (960d759)
• address setup, upgrade, and process test regressions (02f12b9)
• align aggregate tools with session capabilities (ede91ff)
• align MCP archive contracts and documentation (#2478) (a86deec), closes #2454
• align session filters and Hopper verification (d7d6bdf)
• analysis-view: bound limitations and unknowns per view (#2794) (20b802f)
• analysis-view: preserve artifact parent schema diagnostics (#6361) (295e7ef)
• analysis-view: preserve current observation paths in summaries (#7039) (2389149)
• analysis-view: preserve inline Evidence error paths (514df09)
• analysis-view: preserve native relationship coverage (89dd71f)
• analysis-view: reject accessor-backed inline evidence before parsing (278d7fb)
• analysis-view: remove contract initialization cycles (16e1cc6)
• analysis-view: unify inert inline Evidence admission (11b747f)
• analysis: accept valid final dossier pages (7c36f36)
• analysis: bind overview document identity to the active target (#1094) (81b5104)
• analysis: expose provider image base (#2083) (81cca2e)
• analysis: gate document selection fallback and completion (9df559b)
• analysis: preserve artifact and selection error ownership (4f212c6)
• analysis: preserve extraction gaps and database failure reasons (5b7fe94)
• analysis: preserve input diagnostics and reuse JEB contracts (a0edd14)
• analysis: preserve operation input correction fields (049bc2d)
• analysis: preserve producer identity and partial evidence (6fb3a34)
• analysis: preserve relationship coverage across evidence and replay (9c85114)
• analysis: preserve snapshot mismatch recovery (1bc27d2)
• analysis: propagate typed cancellation across batch stages (459c095), closes #3198
• analysis: report call-edge truncation (6039b92)
• analysis: resolve procedure identities and preserve literal queries (d830cb7)
• analysis: retain artifact admission cancellation reasons (52b73ee)
• analysis: retain one-shot target selection provenance (535926c), closes #5479
• analysis: retain typed outcomes through final cleanup (b43daa1)
• analysis: scope call-graph caveats to their observed relationships (5dfb9d0)
• android: align runtime suffix inference (#977) (fb3749a)
• android: bind JADX snapshots and hashes to admitted sources (db8ccaa)
• android: bound fragmented JADX MCP frame memory (#937) (9e39795)
• android: bound inline search Evidence with retained inventory provenance (#1890) (7a0140b)
• android: cancel admitted snapshot copies with their operation (999e3e2)
• android: clean Windows workspaces after owner termination (#2440) (c938f97)
• android: decode guardian output as UTF-8 streams (73be86c)
• android: finalize startup diagnostics before reporting failure (3ad1032), closes #4844
• android: honor selected Java paths and retain input issues (b31f529)
• android: name the JADX deadline and recover apktool decode (#6024) (01788ba)
• android: own Java prerequisite probing and readiness shutdown (ceeff5a), closes #4845
• android: preserve binary class selectors across metadata calls (43c7255)
• android: preserve decoded values and duplicate class inventories (0677468), closes #1978
• android: preserve executable static initializer evidence (#1876) (efbc25f), closes #1846
• android: preserve graph occurrence and library identity (8ba739f)
• android: preserve JVM settings and reuse metadata sessions (#908) (eab34a9)
• android: preserve metadata dialect and root manifest identity (d137a4c), closes #6804 #6866 #6863 #6819
• android: preserve native and abstract body absence (742b6f5), closes #3488
• android: preserve primary failures through cleanup retries (9fa6d2b), closes #4835
• android: preserve typed JVM memory failures during loading (3fa972a), closes #3517
• android: recover original bodies when Java source is omitted (63c65a2), closes #3443
• android: reject malformed UTF-8 at the JADX protocol boundary (fe8d0bd)
• android: release snapshot streams before closing file handles (0d89978)
• android: report a rejected relative JADX JAR instead of an unset one (#5862) (d124809), closes #5844
• android: report actual provider readiness (c715af8)
• android: report DEX static values of static final fields (#6981) (955c7c8)
• android: report startup and selector failure causes (6c13fc8)
• android: report validated ADB and Apktool host availability (e5deb83), closes #3067 #3068 #3077
• android: resolve hash cleanup through its owner (6e74704)
• android: retain archive admission ownership through cleanup retries (300905c), closes #4846
• android: support owned JADX stdio on Windows (#1276) (636b245), closes #1262
• android: validate engine archive prerequisites (#1145) (e9ebfb9)
• android: validate explicit Java runtime (#742) (7390390)
• apk: bind certificate facts and signer comparisons to identity (f783f0f)
• apk: classify damaged Zip64 tail framing (a2235b0), closes #6471
• apk: classify malformed supported Zip64 records as input failures (9038589)
• apk: read constructed BER signer signatures (55185ab), closes #6603
• apk: retain raw issuer identity when matching rules are unknown (115a78f)
• apktool: accept --no-strings CLI option (#2707) (11f8b76)
• apktool: attribute decode refusals to the selected APK (cc038da), closes #3340
• apktool: derive locale size from resource configuration fields (6385ef4), closes #4817
• apktool: disclose platform and release advisory windows (d38f099), closes #4818
• apktool: disclose tables outside exact locale selection (98886ad), closes #4612
• apktool: distinguish document failures from entry omissions (dc2e811), closes #4820
• apktool: join active work and retain cleanup authority (a84dea5)
• apktool: name host requirements in configuration refusals (#1946) (7cdb798)
• apktool: own file and workspace finalization (4844ae8), closes #4812
• apktool: own the version probe's process group and keep its timeout typed (#3808) (089ef73)
• apktool: preserve decoded APK Evidence subject (#4771) (e5ee3ac)
• apktool: preserve valid replacement characters in decoded XML (#4697) (326c073)
• apktool: read the resource locale grammar from its owner (#2738) (5929892)
• apktool: resolve Windows PATH launchers before invocation (#2802) (1eca600)
• apktool: retain acquisition and launcher failure reasons (2aa8d73)
• apktool: retain advisory facts from the version observation (63696d2), closes #3438
• apktool: retain command cleanup ownership through recovery (11bcf44), closes #4808
• apktool: retain completed facts after locale read failures (34a88d6), closes #4880
• apktool: retain decode facts across interrupted read stages (f5fcf52), closes #4882
• apktool: retain observed table counts through output limits (d37c346), closes #4874
• apktool: run Windows batch launchers through cmd.exe (#1777) (ae95e68), closes #1774
• apktool: select numeric regions using Android b+ qualifiers (29910d1)
• apple: account for repeated archive projections (e1df5e8)
• apple: account for roots skipped by ordered reads (a8758da)
• apple: align asset allowance and category fixture types (0321bb9)
• apple: attribute only application-root components in macOS inventories (5524970)
• apple: bound binary plist expansion before decoding keyed archives (#1515) (2bf8127)
• apple: bound Interface Builder XML plists by shared value depth (#4114) (3776f21)
• apple: budget Interface Builder decoding and projection (dbcf8c3)
• apple: classify empty dyld settings by consumer semantics (#1110) (fe297e5)
• apple: classify Interface Builder edges at their source (e21b131)
• apple: classify keyed-archive objects by declared superclasses (#5228) (0344d57)
• apple: count Interface Builder hierarchy records beyond the object limit (#4162) (d816470), closes #3950
• apple: count only real framework version directories (2e81e86)
• apple: decode binary app Info.plist files without plutil (#1476) (c8820e0)
• apple: decode bundle plist bytes before executable lookup (d575a73)
• apple: decode Interface Builder XML byte encodings (#1095) (f8e143a)
• apple: decode NIBArchive booleans with AppKit's polarity (#6255) (ef5ab1f), closes #5541
• apple: decode Swift conformance type references (6b7d429), closes #5738
• apple: decode UIKit keyed-archive outlet connections (8d4d631)
• apple: decode valid nonstandard plist table widths (4526862), closes #6805
• apple: derive bundle anatomy from directory facts (149a0fc), closes #3359 #4779
• apple: derive dispatch coverage from located decode facts (488f448)
• apple: derive dyld environment findings from each traced slice (#2733) (52d4ce6), closes #2661
• apple: derive hierarchy completeness once per document (7cfcd16)
• apple: derive launchd domains from owning directories (5d6029e), closes #3353
• apple: distinguish JVM resources and UIKit event connections (ceb77f6)
• apple: exclude AppleDouble sidecars from IPA components (#2838) (e13da08)
• apple: explain present rejected dylib candidates (3b67b36), closes #5747 #5694
• apple: join recognized keys from NIBArchive field maps (#2248) (fd985db)
• apple: keep dyld candidates inside the analyzed root on Windows (#6955) (b09c6b0)
• apple: keep empty asset catalog pages complete (9db5f1b)
• apple: keep Interface Builder objects whose archived class is unresolved (#4118) (a90c9ea)
• apple: keep scalar facts when object-table entries share a record (#5806) (f5410bd)
• apple: keep skipped catalog entries from reading as absence (a079af2)
• apple: keep the documented terminating process, parent pid and metadata members of IPS reports (#7079) (0a2b7af)
• apple: keep the recorded image name and frame symbol offset of IPS reports (#7059) (bffe8a5)
• apple: keep unrooted extensionless Mach-O in IPA executables (#3300) (ffeb2d4), closes #3174
• apple: limit already-loaded reuse to rpath dependencies (#2292) (60f771a)
• apple: order projection paths by Unicode code point (#3294) (57290a0), closes #3177
• apple: own ordered nib collections and registry parentage (584791f)
• apple: pair bridge hypotheses within one application root (7acf4e7)
• apple: pair bridge hypotheses within one application root (9226ade)
• apple: preflight XML plist nesting before keyed archive decoding (#2161) (7711b00)
• apple: preserve 128-bit keyed archive integers (#4324) (44c9ff7)
• apple: preserve archive admission and authored UI dispatch coverage (8b93eff)
• apple: preserve archive signatures and metadata byte identity (dc038d1)
• apple: preserve archived className fields and descriptor identity (b3995a2), closes #6776
• apple: preserve ARM64E X1 architecture identity (f598bab)
• apple: preserve asset catalog caller cancellation reason (#6055) (07fd426)
• apple: preserve asset catalog rejection context (33f3841)
• apple: preserve asset failures and authored resource coverage (dbbaf2a)
• apple: preserve binary plist scalar source facts (d672cc2), closes #5701 #5703 #5705 #5782 #5783 #5792
• apple: preserve bundle discovery coverage and decode failures (78f8eca)
• apple: preserve bundle occurrence identity and framework roles (7fba991)
• apple: preserve byte identity in metadata names (9d4293b)
• apple: preserve decoded keyed archive scalar identity (2cf9c28), closes #4295 #4785
• apple: preserve directory requirements in dylib paths (#1623) (6a41a29)
• apple: preserve empty IPS text and source keys (8dfc683)
• apple: preserve exact Interface Builder plist integers (2202e3f)
• apple: preserve keyed archive table identity (78ce91f), closes #6662
• apple: preserve line terminators in dyld path expansion (#5363) (bd2a84c)
• apple: preserve NIBArchive special real values (43e7917), closes #6583
• apple: preserve slice identity and macOS boundary diagnostics (#1772) (5c29565)
• apple: preserve XML plist UID reference identity (91c28e2)
• apple: qualify unexamined nib content coverage (7932312)
• apple: read LC_LAZY_LOAD_DYLIB_INFO dependency payloads (#5650) (23196da)
• apple: refuse invalid binary dates and unknown sub-millisecond instants (#5786) (a00e4ac)
• apple: refuse unpaired surrogates in IPS JSON strings (#6990) (f196ebf)
• apple: report proto entries omitted from OpenStep property lists (#4105) (fe7bcc3)
• apple: report a read-denied selected archive as host access denial (#6479) (eab61d0)
• apple: report a recognized connector that cannot name its owner (#2484) (cae7620)
• apple: report apps without asset catalogs as empty inventories (e2f0378)
• apple: report apps without asset catalogs as empty inventories (79e5a39)
• apple: report missing keyed archive hierarchy references (#1104) (3b2ec69)
• apple: report plist dates the decoder cannot represent as unknown (#3793) (7a66470)
• apple: report unusable dylib-resolution roots as invalid input (6a1e558)
• apple: report unusable dylib-resolution roots as invalid input (24a30fd)
• apple: resolve absolute dylib paths inside the selected root (1502cfb), closes #5637
• apple: retain binary UID identity through archive projection (1c57eed)
• apple: retain reader outcomes and cleanup ownership (59a00d7)
• apple: retain selected dylib identity after path removal (b488a10)
• apple: retain unavailable application components (c192c58), closes #4688
• apple: retain unsupported NIB connectors in connection coverage (14cd78c), closes #5590
• apple: scan keyed archive root values in context (5a590e6)
• apple: scope keyed archive traversal to the selection (c8fd2f1)
• apple: select only entries named Assets.car as asset catalogs (#4094) (befbc02), closes #3914
• apple: share dylib read ownership and cancellation facts (d292c44)
• apple: stop counting single-object NIB connectors as ownerless (#3502) (740f107)
• apple: trace legacy macOS dylibs with implicit platforms (90062c0), closes #5696
• apple: traverse keyed archive hierarchy collections (#976) (71ac83f)
• apple: use archive UIDs for keyed nib identity (6fbe67d), closes #6849 #6850
• apple: validate build-version tool records within cmdsize (#1784) (817aef4)
• apple: validate dylib candidates and preserve search uncertainty (#1100) (7914e36)
• apple: validate physical slices and dylib platform compatibility (15f92f2)
• application: accept alternative document selection in binary_ove& (#2680) (23dc8fb)
• application: add explicit investigation replay (7112e1e)
• application: add explicit investigation replay (a6b5ca4)
• application: budget bridge candidate projection by bytes (3d450a2)
• application: normalize owned target admission cancellation (2daeff4)
• application: preserve a cancellation that races a completed provider run (#2710) (855ed96)
• applications: route bundles by discovered layout and preserve access failures (549f240)
• application: verify configuration and reference input reads (a9fd1ae)
• artifacts: accept APFS image disks ejected with their container (d93ebec)
• artifacts: accept APFS image disks ejected with their container (b72c079)
• artifacts: accept the bundle subject when extracting an app bundle (#891) (37d2eba)
• artifacts: admit bounded reads and preserve source identity (6d4cefc)
• artifacts: admit ZIP archives after unclaimed leading bytes (#5803) (35d6d5b)
• artifacts: align projection provider targets (560dbda)
• artifacts: authenticate complete inspection and summary inputs (0405c9d)
• artifacts: authenticate file subjects across provider and view boundaries (3c57e1a)
• artifacts: bind ASAR interpretation to owned snapshots (d79317c)
• artifacts: bind directory reads to captured file state (918713a)
• artifacts: bind inspection provenance to every retained inventory (9ac91e0)
• artifacts: bind inventory and extraction cleanup to exact owners (bbfe6ed), closes #4928
• artifacts: bind member reads to emitted metadata (39da0b1)
• artifacts: bound archive decompression by source size (#2144) (c59fbf5)
• artifacts: bound expanded ASAR listing before allocation (#2724) (f825c86)
• artifacts: bound mobile projection candidates (0cc9d46)
• artifacts: break directory child collation ties (#587) (b37e47c)
• artifacts: carry exact cleanup authority through scope failures (2582c26)
• artifacts: classify ZIP offsets beyond EOF as malformed (c209dcb)
• artifacts: close mounted directory resources before DMG detach (2260887)
• artifacts: compare inventories using declared coverage (#2214) (45a3509)
• artifacts: compare leaf inventories using explicit coverage (ed485a3)
• artifacts: compare package signatures without ASCII folding (#2069) (75a4a14)
• artifacts: compare plist and NIB signatures without ASCII folding (#2098) (43e33cd)
• artifacts: compare PyInstaller declaration facts (142cf18), closes #6484 #6485
• artifacts: compare source map target identity (131c1f1), closes #6706
• artifacts: complete positional ZIP reads (#4414) (82e4e03)
• artifacts: complete ZIP positional reads (82e4e03)
• artifacts: count a changed partial-inventory root once (#1854) (ee5275c), closes #1844
• artifacts: decode flat keyed-archive NIBs with data and shared references (b3f013f)
• artifacts: decode flat keyed-archive NIBs with data and shared references (2a4667b)
• artifacts: defer lazy loads and tighten Mach-O validation (9128039)
• artifacts: describe observed inventory scope accurately (77be87d)
• artifacts: describe ZIP non-entry coverage accurately (#2059) (3cb9d61)
• artifacts: diagnose unpacked ASAR integrity failures (a504342)
• artifacts: disclose unavailable content hashes in summaries (#6481) (b395190)
• artifacts: distinguish Java classes from universal Mach-O (921bb95), closes #2317
• artifacts: distinguish JVM classes from universal Mach-O files (#2327) (fcfa5b7)
• artifacts: exclude removed paths from unchanged counts (#569) (52bf709)
• artifacts: expand nested ASARs on Windows (#582) (ebb4c45)
• artifacts: flag truncated Mach-O headers and keep canonicalization denials (9a487a4)
• artifacts: follow dyld slice grading and report unparsed images (a0ec3e2)
• artifacts: harden reader lifecycle boundaries (#951) (2366bda)
• artifacts: honor cancellation at the output publication boundary (e7882b3)
• artifacts: infer legacy Mach-O simulator platforms (5aa2002)
• artifacts: interrupt ZIP extraction under backpressure (#594) (50f7e81)
• artifacts: inventory universal slices REA cannot structurally index (#3283) (e582859)
• artifacts: keep cancellation and the caller path in extraction refusals (37025cc)
• artifacts: keep cancellation and the caller path in extraction refusals (eacf846)
• artifacts: keep case-distinct archive names in inventory (#1480) (1f07756)
• artifacts: keep streamed reads within descriptor ownership (e0e49e9)
• artifacts: keep the post-snapshot detach check out of provenance (62634e4)
• artifacts: keep unknown inventory traversal out of complete inspection coverage (ce1f4b1), closes #5837
• artifacts: make extraction output tree work on Windows (#753) (c8e66c7)
• artifacts: mark Windows host executables by extension (#1823) (91f843b), closes #1819
• artifacts: mark Windows launchable files as host executables (#1824) (e8491e0), closes #1819
• artifacts: match lipo arm64e variant names to their FAT slices (de5bfec)
• artifacts: match lipo arm64e variant names to their FAT slices (0b32577), closes #1168
• artifacts: name only host-available workflows for non-archive plists (f4c99ab)
• artifacts: name only host-available workflows for non-archive plists (2295855)
• artifacts: name the ASAR header admission budget (#6172) (d7ca93c), closes #5910
• artifacts: never count occurrences on an unknown duplicate path as unchanged (#4100) (d929543), closes #3956
• artifacts: never treat a directory named *.map as a source map (#4131) (9d6651e), closes #3909
• artifacts: normalize ZIP current-directory prefixes at the reader (6b1c36e), closes #4124
• artifacts: own DMG readers before attachment (bbd0192)
• artifacts: preserve archive entry types and host paths (#581) (28e0f4e)
• artifacts: preserve archive facts and Unicode path identity (5751f5c)
• artifacts: preserve cancellation observed during directory sync (04ba5ca)
• artifacts: preserve decode coverage and cleanup ownership (a73a55f)
• artifacts: preserve descriptor cleanup authority (be6272f)
• artifacts: preserve emitted ZIP entry identity (e36c82b)
• artifacts: preserve exact ZIP and DMG caller cancellation reasons (4d3a7a0)
• artifacts: preserve extraction coverage and provenance (8f29c7a)
• artifacts: preserve failures while unwinding nested traversals (a17e257)
• artifacts: preserve input size refusals and recovery (8451d28)
• artifacts: preserve integrity contradictions for one-sided members (#7076) (fead4fd)
• artifacts: preserve inventory uncertainty in application projections (d8ceb3f)
• artifacts: preserve keyed archive integer precision (4034883)
• artifacts: preserve Mach-O load-command string identity (#2110) (7072f87)
• artifacts: preserve NIB field and class identities (#2106) (f8e9579)
• artifacts: preserve NIB key and class name identity (#2109) (e103a89)
• artifacts: preserve opaque close hook failures (de9a889)
• artifacts: preserve opaque Node SEA asset keys (4257761)
• artifacts: preserve opaque ZIP cancellation reasons (f1d1885)
• artifacts: preserve owned file failure and cancellation facts (3a42a9e)
• artifacts: preserve path identity and exclusion applicability (ec27112)
• artifacts: preserve physical ZIP member identities (#1865) (bcd350c), closes #1860
• artifacts: preserve raw directory name identity (47900f9), closes #6665
• artifacts: preserve reader failure diagnostics (#987) (fc4a9a0)
• artifacts: preserve source names and describe materialized reader output (bbc7554)
• artifacts: preserve traversal coverage through bundle workflows (5e4004c), closes #6852 #6825 #6582
• artifacts: preserve typed resource limit diagnoses (34552ff)
• artifacts: preserve ZIP identities and partial managed metadata (74d7da6)
• artifacts: preserve ZIP member identity and filename semantics (7777abf), closes #3152 #3237
• artifacts: project compiled AppKit actions from the control to its target (b08228d)
• artifacts: project compiled AppKit actions from the control to its target (#905) (900d7c8)
• artifacts: project UIKit runtime outlet and event connections (aa8082e)
• artifacts: project UIKit runtime outlet and event connections (8b24387)
• artifacts: propagate conditional loads and bind digests to parsed images (5e334a0)
• artifacts: publish addressable inspection sources through both adapters (bd8e1fb)
• artifacts: qualify weak and lazy findings below conditional loaders (002503d)
• artifacts: read AppKit connectors from flat keyed-archive NIBs (#900) (27c272b)
• artifacts: read ASCII control bytes in legacy ZIP names as ASCII (#2365) (9928f35)
• artifacts: read every ZIP package family extraction is asked to open (#2493) (7017c4d)
• artifacts: read keyed archive dictionaries keyed UID as dictionaries (cfd2b0c)
• artifacts: read keyed archive dictionaries keyed UID as dictionaries (35c82b9)
• artifacts: recheck failed DMG detaches before reporting cleanup failure (#1155) (58a91f0)
• artifacts: recognize empty Zip64 containers (e44ff46), closes #6540
• artifacts: reconcile ARM32 Mach-O slice names by subtype (#4352) (1684c73)
• artifacts: record each case collision once at its diverging segment (#1505) (983b070)
• artifacts: recover malformed PYZ sizes without losing siblings (f8f4a5c), closes #6120
• artifacts: recover only from owned destination case collisions (932fbb7)
• artifacts: refresh cached ASAR headers for each inventory (#574) (f5013c5)
• artifacts: refuse thin Mach-O extraction before inventory (#6152) (af73951), closes #6098
• artifacts: refuse unsupported extraction formats before scanning (8e74c9c)
• artifacts: reject colliding extraction paths before writing (862a0b2)
• artifacts: reject incomplete inventoried extraction (5e8fb53)
• artifacts: reject malformed serialized keys and integer values (9435c7a)
• artifacts: reject Windows stream paths before extraction (573598c)
• artifacts: report a stable symlink loop as a path resolution failure (#5571) (b81431d), closes #5521
• artifacts: report encrypted archive entries as unsupported extraction (de43da7)
• artifacts: report keyed-archive selection mistakes as invalid input (5a55d5b)
• artifacts: report keyed-archive selection mistakes as invalid input (25fb6d3)
• artifacts: report malformed ZIP archives as format failures (#2683) (cd2ad1f)
• artifacts: report non-archive keyed-archive selections as unsupported targets (fef38e4)
• artifacts: report non-archive keyed-archive selections as unsupported targets (8c5088c)
• artifacts: report target applicability in session discovery (#5763) (7c6c25d)
• artifacts: report unknown inventory traversal in inspection coverage (#5867) (ce1f4b1)
• artifacts: report which path constraint failed (#847) (3f1a77f)
• artifacts: report wrong target kinds as unsupported targets (b34bdcd)
• artifacts: report wrong target kinds as unsupported targets (637bcb5)
• artifacts: require regular source-map target occurrences (b165b0e)
• artifacts: resolve parents after archive enumeration (#578) (8eac290)
• artifacts: respect XML plist byte-order marks (#514) (23c4eba)
• artifacts: retain admitted ZIP ownership through extraction (0354759)
• artifacts: retain ASAR resources through cleanup failures (eb97da3)
• artifacts: retain caller selection and applicable publication recovery (a2d2e70)
• artifacts: retain canonical cleanup leases for scope owners (daa641a)
• artifacts: retain cleanup owners through client shutdown (ffe0574)
• artifacts: retain completed acquisition facts through finalization (d9189ae)
• artifacts: retain declared ASAR companion occurrence facts (6c307e9)
• artifacts: retain descriptor ownership and read completion facts (542fa84)
• artifacts: retain DMG carrier observations when child traversal is unavailable (03ae514)
• artifacts: retain DMG ownership through uncertain attachment (a27794c)
• artifacts: retain DMG producer failures and bound integrity recovery claims (35aa8ef)
• artifacts: retain dylib enumeration readers through failed cleanup (612bbee)
• artifacts: retain expanded ASAR container parents (#583) (00fa974)
• artifacts: retain failed DMG cleanup state and diagnostics (#1103) (4bb056b)
• artifacts: retain failed native DMG attachment provenance (7c88ef1)
• artifacts: retain Mach-O source identity through inventory (5daff4d)
• artifacts: retain original I/O failure evidence (1d896e0)
• artifacts: retain output identity through cleanup retries (78778d9)
• artifacts: retain output ownership through publication failures (3f8c51e)
• artifacts: retain permission omissions through JavaScript lookups (693ecec)
• artifacts: retain raw archive keys across entry projections (7fe5e5f)
• artifacts: retain read cleanup ownership through CLI and MCP shutdown (b955b82)
• artifacts: retain reader owners after cleanup failures (5502ca9)
• artifacts: retain relative paths in directory identities (#580) (348323d)
• artifacts: retain unpacked ASAR handles after close failures (de0d341)
• artifacts: retry transient DMG verification refusals (bb54082)
• artifacts: serialize ASAR snapshot ownership (026126e)
• artifacts: serialize concurrent cleanup lease releases (16924e2)
• artifacts: share bounded ASAR signature observations (e8da7e1), closes #3574 #5188
• artifacts: stabilize extraction approval (7eb1a95)
• artifacts: sync nested publication and retire admitted file state (e2eacf6)
• artifacts: take nested container families from bytes (#1553) (4b985e5), closes #1491
• artifacts: trace .app-named files standalone and flag empty FAT tables (ef245c0)
• artifacts: validate only active extraction entries (cfb12e4)
• asn1: decode four-byte BER lengths unsigned (3a2074b)
• async: own completion across test and provider boundaries (5938581)
• attribute rendered frame omissions to their producing stage (5934387)
• beam: accept bytes after declared form (8520d42), closes #6717
• beam: distinguish empty optional chunk payloads (c46064c)
• binary: clear retired availability when restoring a session (345c47c)
• bind Electron actions to the selected native window (597aecf)
• bind identity and coverage to the producing rule (#1513) (b4db35f)
• bound browser scenario initial navigation during startup (5cded74)
• boundaries: reject unsafe local inputs (15e8cf3)
• bridge: bound regex search work (733a382)
• bridge: bound regex search work (65682ee)
• bridge: harden bounded Hopper boundaries (f8e8ea3)
• browser: accept HAR files that begin with a byte-order mark (#1509) (93ca276)
• browser: account for late script metadata (#6358) (2a3e162)
• browser: admit JSON shape expansion against shared retention (d23dc5d)
• browser: admit legacy capture uncertainty at retained input boundaries (9dac74c)
• browser: admit passive capture events against the shared retained budget (#7043) (1ff275f)
• browser: advertise zero-based units for runtime source coordinates (#1085) (6218d28)
• browser: bind CDP cleanup failures to exact transport leases (ce0d679)
• browser: bind correlated replies to their selected session (96d3caf)
• browser: bind session timelines to the observation window (2a0410f), closes #5609
• browser: bound aggregate source-map decoding before expansion (f983c71)
• browser: bound capture work and preserve observation gaps (f690571)
• browser: bound CDP discovery response size and lifetime (951b095)
• browser: bound CDP handshakes and command responses (#3555) (c61a24b)
• browser: bound CDP messages by the shared budget (7b25a73)
• browser: bound screenshot comparison memory (b3e977e)
• browser: bound script metadata and preserve omissions (faf209e)
• browser: bound source-map fetches and retain predecessor requests (eaf5734)
• browser: budget retained observations independently of wire data (a0fcc60)
• browser: bypass desktop keyrings in verification fixtures (c57e759)
• browser: capture popup network and report early event gaps (#614) (f557207)
• browser: capture selected events in popup pages (#600) (a3bf4a0)
• browser: capture the full visual viewport (#5621) (146dcf4)
• browser: carry unknown XML ancestry through metadata contracts (e8d22ec)
• browser: classify CSP host sources by their own origin (#707) (1d15bcb)
• browser: classify export-web-scripts capture selection failures by cause (ddaa183)
• browser: classify export-web-scripts capture selection failures by cause (8c5e34c)
• browser: classify selected web trace file failures by cause (#1396) (2b6e9ec)
• browser: clear losing storage verifier timers (990e1ad)
• browser: close scenario containment gaps (1bd65f6)
• browser: compare accessibility only with observed coverage (0123d59)
• browser: compare only observed HTTP response facts (486b567)
• browser: compare PNG IHDR bytes without ASCII folding (#2099) (fdd8f82)
• browser: compare script and tool facts without metadata identity churn (65e423e)
• browser: compose nested source-map column offsets (#1109) (8b08ec0)
• browser: confirm late-opening cleanup independently of cancellation (778114a), closes #2597
• browser: confirm service-worker cancellation cleanup (#4010) (2a2a33a)
• browser: contain scenario pages and preserve inputs (24b3dc4)
• browser: decode SAZ XML through typed encoding validation (1250aae), closes #3273
• browser: decode source-map response framing (aa257ea)
• browser: derive source-map imports from syntax nodes (#588) (bae87b4)
• browser: disclose connected platform-emulation teardown limits (2ff0867)
• browser: distinguish computed call keys from identifiers (#808) (02beb74)
• browser: distinguish duplicate screenshot frame events (#612) (1bd641d)
• browser: distinguish SVG links from HTML XLink attributes (#2480) (84ec40f)
• browser: distinguish WebMCP registration frame owners (#813) (b3b44d8)
• browser: drop disallowed redirect evidence (8481be9)
• browser: exclude sensitive binary lengths from historical captures (#2477) (68ecf3d)
• browser: expose capture budgets and queue admitted content reads (57a23f0)
• browser: fingerprint cookies at the selected page URL (#763) (78014e3)
• browser: fold loopback spellings into one attach admission key (#1604) (3e931a7)
• browser: follow only HTTP redirect statuses for source maps (82bbe74)
• browser: give the DevToolsActivePort wait one deadline owner (#2265) (edd9939)
• browser: honor cancellation during CDP cleanup (ad9e22d)
• browser: honor long passive observation windows (#5605) (c3d7d0a)
• browser: identify NodeNext TypeScript original source artifacts (#811) (e84ad86)
• browser: identify scenario timeouts by Playwright error type (30fef57)
• browser: ignore duplicate frame navigations and read block-form source map directives (#546) (828395d)
• browser: ignore scenario storage enumeration order (#5035) (809f3b7)
• browser: include IndexedDB versions in storage fingerprints (84c3060)
• browser: isolate script URLs with empty query or fragment (#2074) (9b780c4)
• browser: isolate web bundle analysis with bounded partial results (9aca543)
• browser: keep bare module locations unresolved (#676) (8189081)
• browser: keep code absence unknown without worker inventory (209c42c)
• browser: keep declared scenario secrets out of redacted evidence (#1590) (6edd5cf)
• browser: keep elapsed capture timing independent of wall-clock changes (6bd2b28)
• browser: keep initiator callsites out of script coordinate guidance (#1096) (3c157b4)
• browser: keep malformed console argument inventories unknown (#6016) (d4c637f)
• browser: keep malformed Content-Length declarations unknown (#2773) (c22d7cd)
• browser: keep malformed Electron CDP inventories incomplete (#3901) (6fcfc5b), closes #3379
• browser: keep omitted JSON request bodies out of complete shape coverage (#4476) (7e8ec0e)
• browser: keep page endpoint type internal (3743962)
• browser: keep refresh guidance for a missing CDP target (#6340) (26bc77c)
• browser: keep subresource redirects out of page navigation scope (#524) (9c28f3c)
• browser: keep target detail when attributing CDP failures (#6223) (ec0e663), closes #6122
• browser: keep the first DOM attribute when the name is repeated (#1516) (f6009d0)
• browser: keep transport credentials out of timeout diagnostics (a417209)
• browser: match exact WebMCP receiver segments (38f92d1)
• browser: name web-bundle budgets and recover web deadlines (#6036) (0155b89)
• browser: normalize selected script manifest roots on Windows (#1078) (b49beb4)
• browser: observe direct target disconnects (9be24f8)
• browser: observe fetch settlement after synchronous abort (13a8640)
• browser: omit erased type-only import-equals from source-map dependencies (#4165) (8686b32), closes #3932
• browser: own transport cleanup through finalization (93c620c)
• browser: parse complete COOP and COEP structured items (c360cfc)
• browser: parse repeated CSP and policy header field lines separately (#6963) (c2068b9)
• browser: preserve admission failures and retain policy transport cleanup (c86288d)
• browser: preserve attached service-worker policies and ownership (221c856)
• browser: preserve authorized redirect hops (#986) (ae0f725)
• browser: preserve body API provenance through script export (966f7cc)
• browser: preserve caller cancellation through CDP observations (7f4e7d5)
• browser: preserve capture uncertainty and frame ancestry (27311f8)
• browser: preserve captures when response bodies are unavailable (96af2fa)
• browser: preserve cleanup failure diagnostics (5a77acf)
• browser: preserve command failures and reject malformed replies (6b92002)
• browser: preserve completed source-map observations (10b83a9)
• browser: preserve correspondence and uncertainty in capture comparisons (a0c22ff)
• browser: preserve distinct WebMCP declaration metadata (#2854) (40e94ae)
• browser: preserve evidence through deep AST analysis (#924) (f826aa8)
• browser: preserve form destinations and satisfies mutation uncertainty (#825) (6dd719e), closes #820
• browser: preserve frame identity across captures (#4040) (0154141)
• browser: preserve Link context semantics (d53584a), closes #6504 #6505 #6506
• browser: preserve Link header value delimiters (#805) (dd36405)
• browser: preserve main-frame identity and scope refusal context (09c2a2d)
• browser: preserve malformed capture gaps and protocol session identity (bffdd91)
• browser: preserve media type parameter spelling (#6985) (85bc8c8)
• browser: preserve observed document invalidation and scope recovery (590bab9)
• browser: preserve operation-aware cancellation errors (0aac8aa)
• browser: preserve passive network inventory uncertainty (e79e014)
• browser: preserve payload shapes and WebMCP declarations (4951a89)
• browser: preserve repeated document Link fields (df2fc25)
• browser: preserve RGB PNG transparent samples (#595) (9997152)
• browser: preserve script-specific parser uncertainty (#2858) (e6c6fdd)
• browser: preserve source-map media types (#4032) (536f5ce)
• browser: preserve storage value code units (#6341) (7aee876)
• browser: preserve uncertain main-frame navigation identity (0bd14ca), closes #5665
• browser: preserve uncertainty and compare redirect observations (2b60e09)
• browser: preserve uncertainty in malformed network observations (a8d4984)
• browser: preserve unknown console timestamps (690fc51), closes #5656
• browser: preserve unknown script ownership through reconciliation (d9a855f)
• browser: preserve unknown storage inventory and fingerprint coverage (#2491) (c7ceaad)
• browser: preserve unknown WebSocket frame facts (0bc2b42), closes #5666
• browser: preserve unknown worker target ownership (1081f81), closes #6475
• browser: preserve URL paths when removing credentials (#4731) (6b0113a)
• browser: preserve WebMCP optional fields and replay coverage gaps (b29aa60)
• browser: preserve WebSocket connections and comparable payload coverage (db4e360)
• browser: preserve well-known path case (401d729), closes #6571
• browser: publish executable examples with truthful capture coverage (1275817)
• browser: read expression-free template literals as module specifiers (#2842) (bcb60c1), closes #2841 #2599
• browser: read SAZ archives with zero-byte HTTP members (#5453) (b0a554c), closes #5411
• browser: redact encoded declared secrets consistently (f09bb8a)
• browser: redact transitional target titles (f6095cb)
• browser: reject empty capture containers beyond the 64-level nesting budget (#3975) (1f9d1b5), closes #3960
• browser: reject overflowing scenario timers (#3515) (eac296a)
• browser: reject overlapping indexed source maps (ba7c3da), closes #6562
• browser: reject unknown Electron input fields (1860d4f)
• browser: release attached emulation overrides (#3778) (7d1e4d0)
• browser: release attached viewport overrides without resizing the external page (f6cfbfc)
• browser: release cancelled CDP cleanup without waiting for responses (#517) (488fd5f)
• browser: release discarded source-map response bodies (#611) (8642055)
• browser: release scenario listeners and allow bounded Chrome close (#2441) (c9982ad)
• browser: report an out-of-range script_index as a selection fault (#6979) (046ec56)
• browser: report attached locale coverage limits (c769759)
• browser: report cancellation after cleanup and source-map abort (#2893) (b25d351)
• browser: report complete storage key inventory changes (#2861) (02095cd)
• browser: report launch timeout stage and startup diagnostics (c765b3b)
• browser: report mismatched event family selection as unknown in capture comparison (#2239) (0043d9b)
• browser: report SVG xlink:href links in dom_urls (#1602) (0f605bc)
• browser: report Windows HAR heap exhaustion (#1147) (1393507)
• browser: report zero decoded bytes for undecodable gRPC-web text (#6159) (d54c434)
• browser: require storage fingerprint approval (f0069cb)
• browser: reserve the initial scenario step id from action inputs (#3493) (4fe88a7)
• browser: resolve companions from the selected manifest directory (bd1b2c7)
• browser: resolve empty storage-world origins from exact frame evidence (c3dcc69)
• browser: resolve prefixed XHTML form actions (cde858d), closes #6561
• browser: resolve redirected source map paths from final URL (#518) (056c123)
• browser: resolve XLink and SVG prefixes in XHTML dom_urls (#1683) (ad3e41d)
• browser: retain attached scenario emulation until cleanup (a0523b3)
• browser: retain bundle default origin scope (#4413) (b5c47f5)
• browser: retain capacity refusal through terminal progress (88bbf9c)
• browser: retain composed artifact cleanup owners across retries (836cbd3)
• browser: retain effective source-map response urls (062723e)
• browser: retain exact scenario cleanup ownership (3460cea)
• browser: retain excluded scope through final URL capture (b98be54), closes #2593
• browser: retain excluded source-map declaration coverage (e8374f4)
• browser: retain historical capture outcomes through cleanup (2e5171e)
• browser: retain incomplete WebMCP replay coverage (e52c0a7)
• browser: retain malformed inventory uncertainty (4cc044b)
• browser: retain malformed redirect diagnostics (617cd84)
• browser: retain module resolution through finalization (94bc7ed)
• browser: retain module resolver cleanup ownership (a82e37c)
• browser: retain optional source-map requires (#2886) (f104500), closes #2883
• browser: retain Playwright IPv6 capture representations (f14c2d4), closes #3161
• browser: retain precise observation termination facts (5891bfb), closes #5756
• browser: retain scenario observations across failures (614e0c2)
• browser: retain scenario resources until cleanup succeeds (88640f6)
• browser: retain startup owners and coordinate retryable close (2a66ec9)
• browser: retain the null console argument in selected console text (#3479) (1dcaa77)
• browser: retain truthful cleanup facts and document request ownership (f01f561)
• browser: retain unknown popup storage initialization coverage (d93c70c)
• browser: retain unknown resource sizes and accessibility roles (a06dbd5), closes #6773 #6786
• browser: scope CDP events and fail closed (5279d77)
• browser: scope workers and binary frame sizes (dfc06cf)
• browser: seed storage by browser partition (8b4c3de)
• browser: separate domain readiness and worker attribution coverage (ba78133)
• browser: serialize attached scenarios through cleanup settlement (cfce91d)
• browser: share decoded response emptiness across capture views (59022b6)
• browser: share DOM snapshot admission (70de702), closes #4709
• browser: skip Windows Electron signals without verified lineage (#1588) (1a6ccec)
• browser: stop expired work and release deadline resources (b2fad36)
• browser: stop late navigation before releasing attached sessions (599fdac)
• browser: support page-scoped CDP transports (c4930f4)
• browser: support page-scoped CDP transports (bf96192)
• browser: support relative source map URLs (5231e95)
• browser: support Termux Android scenarios (#1655) (87edf14)
• browser: treat an unusable cache list as incomplete storage coverage (#2762) (c580ba9)
• browser: treat module-import initiator positions as script positions (ae0630a)
• browser: treat module-import initiator positions as script positions (99d31ee)
• browser: validate and bound source-map evidence (0a0174b)
• browser: validate HAR timing and preserve opaque body encodings (e327baa)
• browser: validate large base64 without regexp stack overflow (49b4edf), closes #5253
• browser: validate PNG chunks and preserve unsupported encodings (4e4b15b)
• build: clarify generated-file check hint and drop redundant catalog step (#998) (6f0ef16)
• build: exclude the test-only generated catalog from packages (#1116) (d1c904b)
• build: make catalogs and packaged skills generated outputs (#1086) (e613405)
• build: prepare release dependency types during installation (#6978) (48c203f)
• build: preserve LF text checkouts on Windows (#1807) (031d778)
• build: preserve native generated-file line endings (00a3078)
• build: preserve resource controls in strict Turbo tasks (#1809) (2e22330)
• build: resolve rolldown from the npm registry in package-lock.json (#1986) (f889a69)
• build: validate installed dependencies before cache hits (#982) (a45fe86)
• bun: report the real runtime and enforce worker memory budgets on Windows (#1730) (66c2157)
• cache: invalidate snapshots that lack source caveat semantics (937b4e6)
• cache: scope Evidence display refresh to matching snapshot bindings (8aa40e9)
• call-path: count only expanded edges as explored (#6256) (c8ed328), closes #5906
• call-path: keep caller-only unknown coverage from blocking not_found (#2371) (84cf779)
• call-path: preserve relationship coverage from analysis (#2001) (ed6af7e)
• call-path: retain unresolved outgoing-call caveats (567b559), closes #6788
• cancellation: bind retained errors to cleanup owners (a721c42)
• cancellation: preserve caller abort reason in cancellation errors (#6144) (4e28166)
• cancellation: preserve caller abort reasons through late finalization (#6143) (087813f)
• cancellation: retain caller reasons across digest and startup (f2fa951)
• cancellation: retain caller reasons at admission checkpoints (9dfa44f)
• capabilities: expose typed availability codes (b906def)
• capabilities: report missing navigation targets (f824841)
• capture IndexedDB object-store record fingerprints (#809) (21a8bd0)
• capture: end special-scheme URL authorities at a backslash (#2767) (77be0f6)
• capture: keep excluded MIME protobuf applicability partial (#6012) (4dfa1c6)
• capture: own HAR schema and response interpretation (254a8e7), closes #6890 #6889
• capture: report an out-of-range record ordinal as a selection fault (#7067) (4973ce7)
• capture: report scenario path search denial as access denied (#6244) (6f96d7a), closes #6117
• capture: retain Electron observations and HAR resource failures (44fd183)
• captures: admit schema-valid HAR numbers that evidence cannot publish exactly (#3159) (35e17a7)
• captures: advertise offline capture inspection without a browser provider (#6725) (4193bc5)
• captures: name the violated HAR schema constraint (#2708) (b69d20a)
• captures: preserve canonical TShark alias fields (d97db6e), closes #6595
• captures: scope HAR HTTP interpretation to entries (#4351) (b4bc6cf)
• captures: validate SAZ XML and classify expansion limits (29a2d13)
• catalog: digest provider projections (645668b)
• catalog: digest provider projections (c4cd033)
• cdp: preserve explicitly selected default ports (e0da397)
• checks: order artifact-backed lint after compilation (0d5033a)
• ci: align diagnostic regressions and format merged changes (67756da)
• ci: align FAT fixtures and consolidate duplicated workflow helpers (a0317cf)
• ci: align omission and browser transport assertions (19f2969)
• ci: align Vitest project worker budgets (f47ee1a)
• ci: allow browser runtime action transport latency (4003151)
• ci: allow cold Chrome startup in runtime fixtures (f941968)
• ci: allow documented public type aliases (97f6a0f)
• ci: allow slower real browser startup (095c75d)
• ci: automate release version artifacts (49ae23b)
• ci: avoid slow Azure archive for the native cross compiler (#1016) (51956c1)
• ci: await complete browser fixture restoration (e45eb33)
• ci: check authored documentation code (#3119) (500e323)
• ci: check decoded reference paths and restore formatting (#1648) (54e2890)
• ci: close speculative browser fixture connections (e5bc4e8)
• ci: constrain SQLite runtimes to supported security patches (d1585fc)
• ci: correlate ownership trace threads and preserve setup failures (aacf740)
• ci: declare the native fixture compiler for Knip (d36cb61)
• ci: decouple stdio smoke tests from Linux display probes (#1014) (93731e1)
• ci: enforce merge verification and unblock superseded runs (#2938) (8fef2aa)
• ci: filter finalized release proposals before pagination (e389d6e)
• ci: format Electron IPC verification assertion (d21132f)
• ci: format JavaScript getter mutation regressions (a11fbc0)
• ci: format keyed archive CLI regression test (#4796) (bd3210e)
• ci: generate source catalog before shard tests (#1002) (eb8f649)
• ci: guard Release Please PR branch parsing (84cc819)
• ci: guard release PR branch parsing (6838b6b)
• ci: handle cache eviction and composed cleanup assertions (#4824) (3ddb2e4)
• ci: ignore generated website translation staging (#2511) (1883149), closes #2508
• ci: include GitHub action code in static cache inputs (c0aa2e3)
• ci: invalidate GitHub entrypoint and package-scope caches (#3522) (eb44921), closes #3510
• ci: isolate browser verifier D-Bus sessions (#6999) (73320bb)
• ci: isolate packed Python syntax checks from ambient imports (21f9af9)
• ci: isolate packed Python syntax checks from ambient imports (#6293) (21f9af9)
• ci: keep cancellation ownership in the calling workflow (db3c9f0)
• ci: keep generated error docs with their owner (3e60e38)
• ci: keep tool kind type internal (b9bead2)
• ci: keep Windows ACL observation in SID form (#5941) (c538a84)
• ci: make coverage report merging composable (788f405)
• ci: make Windows PowerShell observers cheap and cold-start tolerant (#6279) (2452efa), closes #6275
• ci: model bundled runtime entries and dispatcher fixtures (1252f17)
• ci: normalize generated release metadata (d43a461)
• ci: normalize release pull request metadata (119954c)
• ci: own mock isolation and normalize Git patch directories (c8269ca)
• ci: pass selected environment to Windows Ghidra fixture (#1281) (f085589)
• ci: preserve cleanup boundaries and bounded failure assertions (#1618) (16d9c5a), closes #1613
• ci: preserve per-job findings and unavailable blob evidence (2255252)
• ci: preserve stacked integration changes (cf8e5cf)
• ci: propagate readiness verifier failures (9f9f9c3)
• ci: regenerate release product catalog (170e929)
• ci: register Termux browser verifier as Knip entry point (204e2c4)
• ci: reject false browser environment cancellation passes (e18fccc), closes #4033
• ci: reject incomplete verification plans (bd2c202)
• ci: reject omitted release proposal repository identity (5c5f8e7)
• ci: remove redundant process exports (19bb231)
• ci: remove retired native rebuild steps (2d22731)
• ci: remove unused setup type export (c5728af)
• ci: repair boundary regressions and evidence assertions (11e3fae)
• ci: repair capture ownership and portable ABI validation (#5224) (b999e72)
• ci: repair cross-platform package verification (1c9e508)
• ci: repair format gate and pin maintenance skill destinations (603d04e)
• ci: repair option alias, pattern portability, and Italian doc links (cca7bf0)
• ci: report package verifier stage progress (ab80ec6)
• ci: require portable inventory reports on selected runs (#3549) (0f62373), closes #3542
• ci: restore generated shard inputs and cleanup assertions (5f93b4b)
• ci: restore plist, verifier, and TOML capacity checks (#4930) (1accac2), closes #4931
• ci: retain artifacts for delayed reruns (07888ec)
• ci: retry published package verification (0810486)
• ci: retry published package verification (c379455)
• ci: run cache retention from its trusted workflow revision (60956c8)
• ci: run the lockfile-pinned Skills CLI in package verification (#6235) (89268f4)
• ci: run the Windows native lane with its process boundary fixture (#2336) (a3daf8a)
• ci: scope verification and reuse native runners (#1344) (d5cb8ae)
• ci: share provider workflows to restore static gates (a97bd5e)
• ci: share runtime fixtures and allow modest duplication headroom (1b527f4)
• ci: skip portable report merge when shards are skipped (#2943) (2895a18)
• ci: stabilize Vitest project routing and shards (f07acde)
• ci: stop aggregate jobs when verification is cancelled (2e45b4d)
• ci: synchronize browser fixture events before inspection (#1534) (9964af6)
• ci: track imported compiler inputs and package scopes (4c40145), closes #3164
• ci: upload Vitest blob reports from current path (77799e6)
• ci: use an available command for the Ghidra probe marker (#6400) (e32a049)
• ci: use one heap snapshot for JavaScript admission (#6081) (01ee655)
• ci: validate artifact MCP replies against named schemas (#6021) (f862065)
• ci: validate packaged Windows CLI commands exactly (43418ee)
• ci: validate unindexed readiness heads with live PR metadata (#5316) (82c76e2)
• cleanup: project resources from unresolved owners (bf7fad3), closes #4578
• cli: accept --flag=value for global output flags (#3811) (0781716)
• cli: accept exact native names through explicit selectors (c313606)
• cli: accept JSON files for web capture and screenshot comparisons (#1397) (6875d4a)
• cli: accept named native API selectors beginning with a dash (4990a0b)
• cli: advertise defaulted inputs as optional in --schema and help (#1175) (b4927a0), closes #1169
• cli: advertise required CLI selector choices (#6759) (9dde3fd)
• cli: align advertised analysis contracts with runtime (7df85f1), closes #3211 #3194 #3167
• cli: align structured output guard with native flags (#777) (e9fac56)
• cli: avoid duplicate primary cleanup diagnostics (37fcea7)
• cli: await browser scenario cleanup on interrupts (aaeadf2)
• cli: bind completion input to public registry type (094d399)
• cli: cancel routed JavaScript analysis in rea analyze (#1156) (089bbf5)
• cli: classify ENOTDIR JSON input failures (#1000) (a6132be)
• cli: classify JSON input permission denials (08daf05)
• cli: classify oversized JSON inputs (f7cf4c8)
• cli: coerce web execution observation duration (9d569c3)
• cli: complete cleanup after relayed interrupts (#1202) (911152a)
• cli: confirm project grant revocation (6397e54)
• cli: confirm project grant revocation (7a4cfb4)
• cli: consume canonical output validation state (fc70657)
• cli: count emitted documents and normalize token windows (fc404f0)
• cli: disable unmanaged skill synchronization (433ebda)
• cli: disable unmanaged skill synchronization (2c1bf92)
• cli: drive mcp doctor help from a single option schema (b7d803d)
• cli: emit empty structured filter projections (#914) (2db668f)
• clients: advance TOML statement lines without document rescans (e103ae0), closes #4873
• clients: preserve large TOML documents without argument spreads (c43bc0b), closes #4856
• clients: preserve portable MCP schemas in native workflows (#1580) (6d8f95e)
• cli: exclude declared sensitive values from parser diagnostics (#6258) (c083fed)
• cli: exclude inherited values from Markdown rows (#6984) (ce4e48c)
• cli: fail commands returning projected analysis errors (#506) (2fd1196)
• cli: fail when JSON input files cannot be parsed (18c1829)
• cli: fail when JSON input files cannot be parsed (3201f05)
• cli: finalize doctor cancellation after failure logging (662fad9), closes #4848
• cli: format arrays of empty objects without keys as JSON (#7058) (4ed33ef), closes #7057
• cli: honor the selected native plist path (#773) (0374865)
• cli: include build step in missing-runtime recovery (6a37346)
• cli: include build step in missing-runtime recovery (ae72abd)
• cli: isolate static native inspection from deep provider selection (f31b231), closes #4555
• cli: keep a selected JSON null in --filter-output output (#2333) (1ca5fd3)
• cli: keep committed evidence bundle receipts after cancellation (#6221) (4a4bbab), closes #6095
• cli: keep file URLs out of operator-relative path resolution (#2882) (f652709), closes #2577
• cli: keep positional admission placeholders omittable (1bf9191)
• cli: label each uninstall skill root by its client (#2197) (ed93abe)
• cli: label reconciliation input failures as application workflow errors (#5668) (67a6477), closes #5436
• cli: list the read failure cause for an unreadable JSON input file (db0afce)
• cli: list the read failure cause for an unreadable JSON input file (6020df5)
• cli: make clean source checkouts start reliably (ed17e76)
• cli: make clean source checkouts start reliably (6ba9765)
• cli: match listener recovery guidance to system failure (0c440bf)
• cli: merge sibling output filter slices (a4bf6f8), closes #6542
• cli: normalize empty Windows profile before imports (#2482) (fa4b828)
• cli: prefer native byte inspection for automatic dispatch metadata (060587b), closes #4555
• cli: present argument guidance without validator cause dumps (4b029a6)
• cli: preserve APK locale-list schema bounds (f1edf0d), closes #4876
• cli: preserve blank JSON paths for input validation (#1068) (3dcb732)
• cli: preserve caller-selected JSON paths (1bfa60a), closes #5103
• cli: preserve canonical input bounds and required choices (3f49545)
• cli: preserve Cutter choices and reject invalid runtime arguments (45d5e80)
• cli: preserve explicit Evidence record pairing in bundle comparison (b885f44)
• cli: preserve failure semantics across full-output formats (570c40c)
• cli: preserve function provider provenance (c630f41)
• cli: preserve literal HTML text in Markdown tables (#6932) (2c3568c)
• cli: preserve literal Markdown table facts (#7073) (cc14604)
• cli: preserve native option descriptions in help (8b4c96e), closes #1418
• cli: preserve omitted positions in filtered JSON arrays (2ae4e16)
• cli: preserve output and comparison input validation (#981) (d5c43d6)
• cli: preserve selected JSON members and Markdown table text (17cd073), closes #6756 #6752 #6755
• cli: preserve spaced output flag values (#4823) (9e372c6)
• cli: preserve typed failures through output filters (4714c7e)
• cli: preserve Unicode and text across token windows (#5814) (7695466)
• cli: preserve unsupported historical-source imports (#795) (911d580)
• cli: preserve web cancellation exit status (1d9b96a)
• cli: print compact mcp doctor JSON when stdout is redirected (#5514) (d11fca4), closes #5435
• cli: refuse a JavaScript integrity policy the binary analyze lane cannot honor (#2808) (641a839)
• cli: refuse scenario steps on passive native UI observation (#2712) (96d1f0f), closes #2674
• cli: reject an empty JavaScript application path (#5265) (1a945ce)
• cli: reject empty analyze and artifact target paths (#2687) (2b98fc5)
• cli: reject empty desktop paths before resolution (b5e43ed)
• cli: reject invalid UTF-8 JSON file bytes (#613) (22acb0d)
• cli: reject surplus positional arguments before execution (ca8b672)
• cli: reject unterminated output filter slices (#2315) (c95315d)
• cli: remove completion markers on system Bash (fd254b5)
• cli: remove ignored result limits (f3645aa)
• cli: render actionable analysis errors (af8c4ef)
• cli: report an invalid REA_LOG_LEVEL as configuration (#2140) (3159732), closes #2135
• cli: report reference-source import failures (00eb03d)
• cli: report reference-source import failures (431e8eb)
• cli: report string capacity failures during result formatting (fd6da70), closes #4806
• cli: require cancellation through command finalization (279c590)
• cli: require explicit setup selections (992ec50)
• cli: resolve xrefs symbol selectors after address validation (#1209) (7e9c911)
• cli: restrict production MCP dispatch (8bd0e5f)
• cli: restrict production MCP dispatch (190e5d3)
• cli: retain browser and Inspector input correction details (#2230) (916ac97)
• cli: retain bundled skill and bias setup wizard toward apply (5692b3f)
• cli: retain bundled skill and bias setup wizard toward apply (fec5c3c)
• cli: retain correction details across adjacent browser commands (#2294) (bb26622)
• cli: retain Cutter discovery through shared finalization (12f6e09)
• cli: retain narrowed token-count format handling (ce9cb72)
• cli: retain nested facts in Markdown tables (3f5d879)
• cli: retain SIGPIPE status through dispatch cleanup (d421e3e)
• cli: retry retained browser scenario cleanup (4daea94)
• cli: return nonzero status for operation failures (#121) (00c187e)
• cli: return nonzero status for operation failures (#122) (964620a)
• cli: reuse firmware and web module input constraints (48c352b)
• cli: route app bundles with trailing separators to native analysis (#3511) (d94ef22)
• cli: route JavaScript applications from analyze (737940c)
• cli: route JavaScript applications from analyze (74965d9)
• cli: route static artifact analysis without native engines (66dcd94)
• cli: route update flag through verified updater (4f7b5fb), closes #4883
• cli: share builtin argument ownership with MCP routing (cd12879)
• cli: share declared output-error redaction (ee2433a)
• cli: share doctor argument ownership across dispatchers (8681752)
• cli: share Markdown formatting with standalone reports (b784912)
• cli: show refusals for blocked setup dry runs (cd88163), closes #3108
• cli: start on Windows when USERPROFILE is empty (#2345) (d4f0c5e)
• cli: stop advertising multi-letter single-dash option aliases (#1395) (498cec0)
• cli: stop quietly when the stdout reader closes early (#3781) (5e8f7c5)
• cli: stream JSON inputs beyond the whole-document string limit (#1360) (6ce3288), closes #1331
• cli: stream JSON results at the shared command boundary (810107a)
• cli: stream large JavaScript JSON results (#1024) (0e25bef)
• cli: support MCP doctor help (a69b833)
• cli: support system Bash completion registration (7eb9eb0)
• cli: unify builtin and global completion scope (a31b4a3)
• cli: validate integer tokens before coercion (8d82579), closes #4182
• cli: validate output windows and finish pending writes (59f0eb4)
• cli: validate selected local paths before resolution (9d7779d)
• comparison: account for unpaired records after explicit bundle pairing (#603) (12a2e37)
• comparison: break function collection collation ties (c3d013b)
• comparison: break function collection collation ties (3aaf7e2)
• comparison: break JSON shape collation ties (217e8cf)
• comparison: break JSON shape collation ties (805c338)
• comparison: keep unnamed reference endpoints distinct or unknown (#3809) (847b732)
• comparison: keep unsupported function facets unknown (#2450) (b17487f)
• comparison: match generated names without swallowing symbol prefixes (#596) (5f3ba3e)
• comparison: normalize CFG identity by numeric addresses (#593) (d1e5c0e)
• comparison: preserve call procedure endpoint identity (80d5c8d), closes #6853
• comparison: preserve decoding uncertainty and known string facts (40c235c), closes #6774
• comparison: preserve uncertainty and v1 inputs (b9217dc)
• comparison: recheck historical calls-only changes (#2223) (688defc)
• comparison: require decoded signatures for structural method matches (#604) (4a98c3e)
• comparison: retain container-only export shape paths (a55b5bb)
• comparison: retain container-only export shape paths (7864d66)
• comparison: reuse parsed native address coordinates (e2efd10)
• comparison: validate function result projections (5f4e39f)
• config: name the rejected setting and its constraint in configuration errors (c3acc34)
• config: name the rejected setting and its constraint in configuration errors (0a0244d), closes #1184
• config: reject NUL bytes in Hopper loader arguments (#2474) (a07ceae)
• config: remove duplicate capture heap floor export (6d977db)
• conformance: preserve own JSON keys during comparison (#573) (3460eda)
• consolidate boundary ownership and cleanup failure paths (#477) (2160d4f)
• contracts: advertise NUL with a portable hex escape (3f59a84), closes #1329
• contracts: align byte read schema with provider (f580d9d)
• contracts: align CLI/MCP boundary contracts (#946) (4a60738)
• contracts: complete canonical mobile graph inventory examples (#4026) (90457af)
• contracts: honor options outside the schema projection cache (0df0e4f)
• contracts: keep error schema internal (ac8cc66)
• contracts: make agent-facing schemas self-describing (0df11dd)
• contracts: mark foreign execution and device mutation destructive (#1904) (0b7fc40)
• contracts: preserve array guidance across MCP schema profiles (204b9f3)
• contracts: preserve local inputs and comparison uncertainty (70e8a8f)
• contracts: preserve safe defaults and client literal guidance (88e3780)
• contracts: reject NUL bytes in Frida, Rizin, and GDB local path inputs (#3575) (a732c85)
• contracts: reject NUL bytes in keyed archive and extraction paths (#3606) (efbc486)
• contracts: reject NUL bytes in objdump and rizin local path inputs (#3600) (c6a2576)
• contracts: reject OS-invalid local paths in binary and artifact tools (#1925) (976c2c0)
• contracts: require absolute local paths for remaining caller-supplied file inputs (#1004) (cbc0dd1)
• contracts: require absolute local paths for session filesystem inputs (5b172b1)
• contracts: require absolute local paths for session filesystem inputs (#948) (5b172b1)
• contracts: require observed provider output metadata (a4ba8ae)
• contracts: resolve local schema references within their resource (46cc5ce)
• contracts: retain option descriptions and portable float patterns (0de322e)
• contracts: return structured workflow failures (4c54ff6)
• contracts: share ADB limits and preserve Rosetta register facts (cb26e8c)
• contracts: validate historical source examples as exact JSON values (5629665)
• copy: use agent terminology (12060f6)
• core: bind numeric type identities and qualify note owners (9b4deb2)
• core: keep released cleanup dependencies empty (26bb85c), closes #4578
• correct native inventories and bridge error classification (#503) (405732a)
• coverage: consolidate request validation ownership (ed069bb)
• cutter: attribute status proof failures to command (5c0472c), closes #4607
• cutter: attribute the host application version (9a82046)
• cutter: cancel discovery probes and queued work (a6c6a76)
• cutter: normalize command checkpoint cancellation (71929ed), closes #4635
• cutter: preserve mixed Unicode output within the frame limit (8a2a1a2)
• cutter: preserve producer failure and cancellation facts (e780148)
• cutter: read the active document from core configuration (2c1dee1)
• cutter: resolve bridge paths from the selected caller home (7e0c7b1)
• cutter: retain command attribution through descriptor cleanup (199396f), closes #4634
• cutter: retain completion-read failures during cleanup retry (60a0acb)
• cutter: retain descriptor owners and join discovery cancellation (2b7b698)
• deps: remediate smol-toml advisories (93091ab)
• deps: remediate smol-toml advisories (c55ae3b)
• deps: run freshness check from escaped paths (8a1c128)
• deps: update the development-only qs serializer (8dde637), closes #3114
• desktop: classify rejected desktop roots as target failures (#5577) (0cfef92), closes #5513
• desktop: probe GameMaker data filenames (79b3f46), closes #6659
• desktop: retain unsupported filename coverage (992e930), closes #6665
• dev: preserve command arguments in exclusive runners (fd95880), closes #2319
• dev: retain exclusive ownership through command shutdown (c7b7089), closes #4258
• discovery: retain Frida optional provider failure dispatch (19d4a31)
• discovery: use contract prerequisites and provider effects (f3bb6b1)
• distinguish native process exit from sampling failure (b2cb9b6)
• dmg: classify localized verification failures safely (f25c41b), closes #4146
• docs: allow README installation wording to vary (92617f9)
• docs: correct Korean README formatting and website translations (#4344) (abbdb46)
• docs: format Italian README tables (9614712)
• docs: render README source notices as GitHub alerts (#3228) (96e7c22)
• docs: resolve link roots before containment checks (034293d), closes #4264
• docs: synchronize disclaimer links across translations (d864ad5)
• docs: validate translated links to canonical product facts (34f7c4f)
• docs: validate translated README website destinations (c9136ee)
• doctor: check only the current platform's Hopper launcher candidates (#6253) (8f91e60)
• doctor: find the Homebrew Hopper cask without writing Homebrew caches (98b07d0)
• doctor: find the Homebrew Hopper cask without writing Homebrew caches (a503376), closes #1165
• doctor: honor explicit Hopper launcher (c69fe2c)
• doctor: honor explicit Hopper launcher (9208592)
• doctor: interrupt Hopper display readiness on cancel (5d7d6ad)
• doctor: preserve unresolved client configuration evidence (d818c3d), closes #4905
• doctor: propagate Kuna cancellation and preserve partial observations (#5241) (d532b18)
• doctor: read each client's own activation key (#6331) (4b4babf)
• doctor: reject unusable Kuna caches and invalid native settings (#5647) (b718ad1)
• doctor: report a missing --format value as MISSING_OUTPUT_VALUE (#6489) (6d6cbdf), closes #6455
• doctor: require an executable Hopper launcher (aee9cb8)
• doctor: validate Hopper startup timeout in readiness checks (#3755) (052956a)
• domain: admit Qualcomm Hexagon (EM_HEXAGON, 164) ELF binaries (#4819) (3c1cce7)
• domain: classify TypeScript parameter properties as declarations rather than identifier reads (#4465) (2bba39b)
• domain: keep a decoded Swift alias category beside undecoded aliases (#4085) (8276382), closes #3934
• domain: order canonical paths by code point, not UTF-16 unit (#1034) (b5c2954)
• domain: preserve derived byte counts and uncertain identity (7a2cd1e)
• domain: preserve partial reference comparison facts (92dadf9), closes #4210 #5131
• domain: preserve prototype-named JSON members through Evidence boundaries (#1049) (40e18b2)
• domain: preserve retryable capability failures through redaction (#2494) (d73ed6f)
• domain: preserve structured cleanup failure reasons (396dcb2)
• domain: reject excessive JSON depth with actionable diagnostics (#1029) (bfbfc73)
• domain: reject malformed base64 before byte-range checks (31dc035)
• domain: report target read-permission denials as access_denied (f36c10f)
• domain: report target read-permission denials as access_denied (d0ff57a), closes #1188
• domain: stop Evidence authentication after invalid JSON (713163e)
• domain: validate JSON data without invoking caller code (f79fd59)
• dotnet: accept legacy small exception section sizes (ee5cfbe), closes #3279
• dotnet: admit real CLI GUID and fat CIL bodies (735973b)
• dotnet: bound RVA reads by section virtual size (975dff2)
• dotnet: compare members with undecoded signatures by exact identity (28fd49f)
• dotnet: compare members with undecoded signatures by exact identity (d52af3b)
• dotnet: correct CLI pointer and byref signatures (1387be0)
• dotnet: correct CLI pointer and byref signatures (fb9ff56)
• dotnet: correct metadata comparison regressions (4f0c33e)
• dotnet: downgrade truncated CIL identity and coverage (736a4e1)
• dotnet: downgrade truncated CIL identity and coverage (dae6807)
• dotnet: honor bounded method row selections (9fe54c4)
• dotnet: inspect native boundaries of non-managed and malformed PEs (d5f28fb)
• dotnet: inspect native boundaries of non-managed and malformed PEs (d98dcfa)
• dotnet: keep a decoded member unknown beside an undecoded counterpart (76b7020)
• dotnet: keep admitted CLI header facts when metadata is unreadable (e5ba693)
• dotnet: keep TypeRef catch identity unknown (b305104), closes #6712
• dotnet: name the instruction when a CIL operand leaves the method body (#2697) (97dc658), closes #2677
• dotnet: name the shared key in exact-signature ambiguities (7714e76)
• dotnet: name the truncated instruction when an operand leaves the method body (#2704) (97268f4)
• dotnet: preserve leading Unicode content in metadata strings (#667) (ddea063)
• dotnet: preserve managed metadata comparison facts (a8b8ff2), closes #6720 #6686 #6713 #6712
• dotnet: reject unfinished CIL prefix chains (#4416) (ca2ca16)
• dotnet: treat ambiguous undecoded members as possible counterparts (73370e1)
• dotnet: validate managed metadata and CIL boundaries (#938) (bda4ada)
• electron: attach error listener to spawned node process in readiness fixture (#3165) (877d404)
• electron: attribute unresolved paths to selected inputs (b7169c8), closes #2272
• electron: bind each contextBridge helper invocation to its own API (#6284) (04fd41b), closes #5871 #5870
• electron: block moveToApplicationsFolder during active capture (#3471) (6bc4ec3)
• electron: block synchronous shell effects during capture (709b5cb), closes #4393
• electron: block trash calls in active observation hook (816a9dc)
• electron: bound hook retention and report dropped coverage (02d0702)
• electron: check Windows lineage before process cleanup (0fa0b04)
• electron: classify dropped preload configuration at the hook (02aea22)
• electron: consume shared native loader and export facts (5a7bddb)
• electron: count bridge listener registrations by source callsite (5064007), closes #5586
• electron: delegate once dispatch to the active runtime (#4605) (3606264)
• electron: follow absolute symlinks that stay inside the framework (#3587) (0e5c511)
• electron: identify each unresolved scenario path (#2279) (ece15ed)
• electron: keep missing unpacked ASAR entries unavailable (fb6964a)
• electron: keep optional provenance fields within JSON evidence values (7d941e2)
• electron: own fuse cleanup through adapters and shutdown (f9de413), closes #4658
• electron: preserve callback ownership through listener removal (dfe8378), closes #4513
• electron: preserve cancellation across waits, state reads and cleanup (180ba03)
• electron: preserve native IPC listener behavior (#4389) (bf34758)
• electron: preserve selected fuse inspection paths (#3104) (ec67aeb)
• electron: preserve unknown resource sizes (79d2b71), closes #4708
• electron: preserve unrepresentable numeric option evidence (41a228c)
• electron: record actions skipped after a failed action (#6023) (8e3bf56), closes #5943
• electron: reject active scenario capture when inspect fuse is disabled (#3453) (#3605) (3e88e21)
• electron: reject non-executable paths and contain launch rejections (#2705) (97aff28)
• electron: report rejected CLI arguments with issue details (#5036) (2aadcf7)
• electron: resolve effective preload after option overrides (#1286) (411498d)
• electron: resolve package and dirname entrypoints by context (4847fc4)
• electron: resolve package and dirname entrypoints by context (1ac9a09)
• electron: respect computed option keys and overrides (af48fe8)
• electron: respect computed option keys and overrides (98de338)
• electron: retain bounded source frame claims (aa45728)
• electron: retain computed literal preference keys (bdf8652)
• electron: retain fuse descriptor ownership through failed final close (#4668) (6b27d8f)
• electron: retain nested bridge facts through wrapper resolution (0351328), closes #3212
• electron: retain process and transport cleanup owners (e7df00e), closes #4805
• electron: retain scoped IPC registration provenance (#7031) (c7ae278)
• electron: separate script frame admission from declared source labels (df00588)
• electron: share executable architecture facts for fuse inspection (bf54c46), closes #4786
• electron: snapshot script frame identity at ingestion (6b991d3)
• electron: support packaged app.asar pages and rewritten unpacked companions (#1400) (4d8d76b)
• electron: unwrap transparent inline window options (b67baed)
• elf: align metadata and admission fixture error types (e8a44f8)
• elf: centralize fixed header validation across consumers (34a4bb6)
• elf: classify compressed note sections as unsupported (9fb8c11)
• elf: distinguish compressed note storage from decoded notes (75a757d), closes #6869 #6563
• elf: follow loader version index precedence (642f657)
• elf: qualify exports without dynamic symbol declarations (0a9bcbe)
• elf: resolve symbol versions from requirements (446b284), closes #6533
• elf: retain raw export name bytes (22df161), closes #6647
• elf: reuse recognized machine architecture facts (ef05713), closes #6629
• elf: validate declared file extents before provider admission (651afa4)
• emit v-mode-compatible patterns for tool schemas (#1220) (f0da05f)
• engines: keep format ceilings fixed and recover the EVMole deadline (#6088) (2947a77)
• engines: serialize JEB acquisition and respect IDA cancellation (5f30ea6)
• entropy: name offset when the byte window starts past EOF (#6495) (e8dad89), closes #6482
• entropy: retain completed file outcomes through cleanup (5bda0a7)
• environment: bound create learning and invalidate stale write proofs (#6929) (41cf869)
• environment: bound state reads and retain cleanup ownership (#6158) (76dbc32)
• environment: compare captured bodies by representation (7af6fa0), closes #6564
• environment: count scenario bodies after request admission (2f2b07f)
• environment: decouple capture chronology from clock formats (0f41150)
• environment: distinguish destination refusal and write access failures (7479f0a)
• environment: match served items whose route repeats a separator (#6876) (9e6c624)
• environment: normalize values from owned response facts (87a5be3), closes #6878 #6837
• environment: preserve clock years and exact probe chronology (0bbd635), closes #6835 #6643
• environment: preserve literal values and recorded comparison chronology (23ab2c4)
• environment: preserve raw UTF-16 token boundaries (54646e8)
• environment: preserve submillisecond insert ordering (18225b9), closes #6525
• environment: preserve UUID renewal ownership (54f51f0)
• environment: refuse UNC pathname in file:// URI before fileURLToPath (#6272) (aff5e23)
• environment: reject out-of-range clock offsets (54c666a), closes #6524
• environment: report capture payload failures at their field paths (#6247) (c537c52), closes #6119
• environment: report later bundle write failures as host failures (#5581) (bd8d73a)
• environment: restrict epoch normalization to clock fields (65168f7), closes #6551
• environment: retain path segments counters and parent diagnostics (f49e2ee)
• environment: retain primary facts through server cleanup failure (77ebfb5)
• environment: retain tarball descriptor ownership during export (ab58edc), closes #5684
• environment: return input permission refusals through Result (11feab0)
• environment: scope fidelity ID normalization (fe0325c), closes #6565 #6550 #6557
• environment: share exact recorded timestamp interpretation (80b7bbc)
• erlang: accept extended BEAM atom lengths (933aa48), closes #6503
• erlang: accept uninterpreted BEAM alignment bytes (860b3dd), closes #6517
• erlang: derive budget recovery from parser-owned facts (a4a5487)
• erlang: distinguish empty optional BEAM chunks (e737e6c), closes #6816 #6874
• erlang: retain admission cancellation reason (0e3e577), closes #6658
• erlang: select the last repeated BEAM chunk (f28c0fd), closes #6518
• errors: derive fixed-allowance recovery from a typed refusal field (5df59ee), closes #5847
• errors: exclude recovered cleanup resources (3ed925e)
• errors: improve recovery guidance (77454dc)
• errors: name fixed allowances in resource-constraint recovery (#5633) (ef59174)
• errors: name fixed plist decode allowances instead of host memory in recovery (#5860) (5df59ee)
• errors: preserve actionable analysis diagnostics (0f96bf3)
• errors: preserve caller abort reasons at admission (#5671) (6b101ff)
• errors: preserve canonical failures and correction details (1629266)
• errors: report caller-selected evidence path failures as invalid input (d4a598e)
• errors: report caller-selected evidence path failures as invalid input (db177c9)
• errors: report union input issues at the union's path (bddeb63)
• errors: restore typed primary after confirmed cleanup (3e82366), closes #4628
• errors: retain secondary failures without replacing primary causes (d4e2339), closes #5059
• errors: return actionable caller-safe failures (fb0da03)
• errors: stop recommending retries for non-retryable failures (#1869) (fb94d9d)
• evaluation: align scenario prompts and outcome gates (d3700f7)
• evaluation: authenticate delivered Evidence citations (844fa52)
• evaluation: canonicalize Unicode argument keys (#980) (0a4caf4)
• evaluation: join owned command cleanup before removing files (#5613) (2a6fc71)
• evaluation: own transcript result parsing and error certainty (79dea89)
• evaluation: prepare and retain native ownership helpers (#5615) (8716b52)
• evaluation: require explicit REA server attribution (443c7af)
• evaluation: share completed transcript facts across graders (1447fd2)
• evidence: admit bundle imports across session transitions (#2303) (1230381)
• evidence: admit current process provider identity (ab5a1c6)
• evidence: admit current process provider identity (d311940)
• evidence: anchor deterministic replay to unknown creation (10e9448)
• evidence: authenticate identities and retain extraction provenance (6bae774)
• evidence: cancel exports before atomic publication (16624f1)
• evidence: centralize authentication failure ownership (b6a0f32)
• evidence: classify derived failures at their owning boundary (93a384d)
• evidence: classify ledger duplicate and missing review Evidence as caller input (#4452) (4cdf3b0), closes #4444
• evidence: classify noncanonical bundles at the input boundary (3a34ad3), closes #3219
• evidence: clear staged write cleanup state after a confirmed retry (#5852) (c2bee63), closes #5842
• evidence: derive bundle comparison status from classified changes (030c477), closes #3216
• evidence: enforce managed identity and cancel bundle reads (3bcc68c)
• evidence: enforce the combined record limit (c791802)
• evidence: enforce the combined record limit (834c70c)
• evidence: link composed workflows to consumed observations (#7028) (1ca7d38)
• evidence: name the failed constraint when a bundle is rejected (82a1a52)
• evidence: name the failed constraint when a bundle is rejected (cf96ceb)
• evidence: normalize unknown revisions and preserve mutation intent (#1733) (2165045), closes #1723 #1724
• evidence: omit absent format recovery metadata (a954e9f)
• evidence: order canonical projections independently of locale (614fb76)
• evidence: preserve authentication failures and diagnose prior commitments (546b2a6)
• evidence: preserve bundle comparison failure ownership (49c804b)
• evidence: preserve call coverage in function comparisons (049132a), closes #2222
• evidence: preserve execution profiles in composed observations (861c11e)
• evidence: preserve format-owned JSON recovery diagnostics (271fecf)
• evidence: preserve integrity contradiction provenance through comparisons (e76f308)
• evidence: preserve JSON ownership across metadata rebinding (#7036) (03ed0c6)
• evidence: preserve literal keys and response body ownership (d1dcebc)
• evidence: preserve primary semantics during pending cleanup (c2cc819)
• evidence: preserve provider execution provenance across workflows (719d56e)
• evidence: preserve source attribution across composed workflows (c4608a2)
• evidence: preserve trace uncertainty and partial provider observations (e997085)
• evidence: preserve valid output paths near filesystem pathname limits (4a24b7e)
• evidence: reject missing recorded inventory and capture facts (a9588be)
• evidence: reject NUL bytes in subject and snapshot paths (#1873) (fa9a7e5)
• evidence: reject runtime locations for managed static facts (f1dfd10)
• evidence: reject unsupported metadata before authentication (acf75e6)
• evidence: report contradictory unknown input as invalid input (#6302) (510838b)
• evidence: report missing evidence files instead of permission advice (e8b92a4)
• evidence: report missing evidence files instead of permission advice (89252f1)
• evidence: require a complete record before the single-record hint (38bbb65)
• evidence: retain caller paths across snapshot replay (9b3a633)
• evidence: retain completed observations on late cancellation (3b69864), closes #4261
• evidence: retain owner finalization reports across cleanup envelopes (640a0cf)
• evidence: retain unreadable PE and Darwin process facts (4a4d36f)
• evidence: validate closure projections and browser body coverage (aada0ca)
• evidence: verify staged output identity after its final write (#4764) (8589b7e)
• evm: decode shortest-form empty CBOR text in Solidity metadata (#3226) (e195b8b)
• evm: preserve cancellation and exact cleanup ownership (459a356)
• evm: preserve command owner cancellation reasons (0ec4826)
• evm: preserve reply allowance failures and selected limits (4b2a4e8)
• evm: preserve transferred cleanup ownership and bounded output (07540cb)
• evm: probe the selected limiter before advertising availability (a74d859)
• evm: reject nested duplicate CBOR map keys (52b0a54), closes #6780
• evm: reject repeated byte-string keys in Solidity metadata (#4024) (8fe8622)
• evm: reject repeated container keys in Solidity metadata (#6230) (fd782cf)
• evm: report the carrier input allowance as a file-size constraint (#6414) (5d81363), closes #6053
• evm: retain cancellation through final cleanup (d43d356)
• evm: retain completed evidence through cleanup cancellation (d694aef)
• evm: retain partial evidence and unresolved worker ownership (6cc6d22)
• evm: trim hex carrier whitespace in linear time (#5200) (48e7470)
• files: preserve physical read failures across late cancellation (9499667), closes #5686
• files: preserve physical read provenance through cleanup (56679dd), closes #5686
• files: reject nonregular capture and JSON inputs (5f16124)
• filesystem: bound and verify admitted file and JSON reads (abb8e81)
• filesystem: distinguish admission and bound-target failures (41e10b2)
• filesystem: enforce symlink and decoded-text admission (ec0b081)
• filesystem: observe cancellation after file finalization (c884864)
• filesystem: preserve digest failures through cleanup cancellation (e65c395)
• filesystem: preserve failure provenance across cleanup owners (4610843)
• filesystem: preserve opaque caller reasons through cleanup (746a044)
• filesystem: reject unstable artifact targets (7829b1a)
• filesystem: retain read cleanup capabilities across retries (b3c912a)
• filesystem: retain stable hash cleanup owners across callers (131fd5d), closes #4266
• firmware: accept the verified Binwalk and Unblob release lines (#844) (bef4321)
• firmware: derive extraction failure from producer severity (243790a)
• firmware: keep a missing producer report distinct after exit 0 (#6008) (c8d3f8f)
• firmware: name missing extractor dependencies in partial extraction (#1879) (1769417)
• firmware: own file access through publication and cleanup retry (2d163c1)
• firmware: preserve admission and extraction coverage outcomes (1545064)
• firmware: preserve snapshot input failures and descriptor ownership (0a51b24)
• firmware: recover after workspace removal failures (#1616) (043fd25)
• firmware: reject malformed UTF-8 producer reports (4a45c14)
• firmware: retain independent failures at each extraction owner (7298bd0)
• firmware: retain multi-file extraction failures (#978) (8aaf9a1)
• firmware: separate analysis and publication deadlines (#4602) (cf5194f)
• firmware: state that Unblob link targets are extraction-relative (#4573) (de00fdc)
• firmware: stop recommending a raise at the staging budget ceiling (#6971) (2e86294)
• firmware: validate configured executables (#751) (9a4e6da)
• flutter: check section-backed symbol tables against PT_LOAD (#3859) (1b036ec)
• flutter: derive dynamic symbol tables from their source (907f4d9), closes #6851 #6884
• flutter: find snapshot headers that a read chunk boundary splits (#2804) (5278835)
• flutter: honor ELF note alignment when reading build IDs (#6423) (572d0c2)
• flutter: ignore unused ELF DT_NULL values (607f509), closes #6768
• flutter: keep completed inspection facts when cancelled during snapshot cleanup (#4766) (34239d4), closes #4717
• flutter: name a missing or non-file APK selection (#2727) (46f51ee)
• flutter: preserve short GNU build IDs through public workflows (678c4cf), closes #6697
• flutter: qualify unsupported unified snapshot profiles (9cd46d6)
• flutter: reject ambiguous ELF mappings and bound note reads (#2334) (e3a012d)
• flutter: report cancellation during snapshot cleanup with completed observations (#4762) (63c5309), closes #4640
• flutter: select reported ABI labels through shared contracts (64abd4a)
• formats: preserve high bits in remaining magic-byte checks (#2384) (8e6f37e)
• formats: preserve high bits in Windows signature checks (ac57c88)
• frida: clarify device selection and cleanup contracts (2ec602b)
• frida: drain admitted operations and honor queued cancellation (#2305) (4481f86)
• frida: name the argument each Frida input error rejects (#2217) (86de439), closes #2213
• frida: preserve attach targets and reconcile early detachment (56128a8), closes #3099
• frida: preserve resume failures across caller cancellation (69aa546)
• frida: preserve script diagnostics and isolate capture truncation (5fa7a52)
• frida: preserve script evidence through cancellation and decoding (048d707), closes #3979 #3396
• frida: preserve session refusal and close execution effects (3a62b96)
• frida: reject an unreadable script file before starting a session (#2211) (c9aecde)
• frida: retain cancellation through final session cleanup (44b6ec9)
• frida: separate attachment from target resume observations (69fe86c)
• frida: share canonical discovery results across adapters (4cbcead), closes #4637
• frida: share exact JSON string byte accounting (435efe7), closes #5097
• functions: name the rejected side and supplied kind in Evidence errors (e00ee31)
• functions: name the rejected side and supplied kind in function Evidence errors (#6969) (e00ee31)
• functions: preserve coverage diagnostics separately from blockers (cb4ff50)
• gdb: accept GDB's built-in p, s, d and t aliases (#5124) (be4498d), closes #5098
• gdb: correlate raw-output completion and retain read-only TTY proof (f3df653)
• gdb: gate readiness and retain caller cancellation through cleanup (696832c)
• gdb: keep console recovery available for multiple inferiors (8328a95)
• gdb: preserve configured executable launch recovery (b9212b5)
• gdb: report close disposition as a capability precondition (847472a)
• gdb: separate queued work from MI synchronization (86a0428), closes #6661
• gdb: validate complete thread-group inventories before cleanup (d9aa06d), closes #4150
• gdb: wait for the outer console command to finish (5bb01ca), closes #6660
• gemini: compare consolidated allowlists through one normalizer (#2495) (b9b3a90)
• ghidra: accept stock language IDs with LEBE endianness or a slash (#7070) (60ab148)
• ghidra: admit carved MIPS ELF with incomplete section tables (#1629) (d6f698d)
• ghidra: admit installation metadata through owned bounded reads (5112fe0), closes #4672
• ghidra: admit Linux arm64 with matching native tools (3e598b2)
• ghidra: admit observed procedure symbol metadata (f42ade1)
• ghidra: admit recordless MIPS-I legacy targets (#7014) (97194c4)
• ghidra: admit the 12.1 line and the install's JDK range (#840) (5cbf06c)
• ghidra: attribute import policy conflicts to settings (84c327e)
• ghidra: attribute returned profile cancellation at its owner (c72786f)
• ghidra: avoid nested quotes in Windows Java options (a574b74)
• ghidra: bind session refusal to retained cleanup owner (45abd4d)
• ghidra: bound the Java version probe output (#2361) (e0bd31c)
• ghidra: build bridge script paths with the target platform syntax (bb74211)
• ghidra: centralize SIGKILL evidence projection (9a16528)
• ghidra: classify modern Swift manglings in swift type analysis (#1208) (6935dc7)
• ghidra: clear wrong no-return flags before serving a session (#1419) (162f9bf)
• ghidra: compare final DOS relocation windows (969aafc), closes #3981
• ghidra: consume inspected configuration directory identity (#4077) (e0b989c)
• ghidra: derive installation admission from Java property semantics (2187e16)
• ghidra: disclose missing PDB symbol coverage (#2275) (865c35e)
• ghidra: discover installations from resolved PATH launchers (86afc04)
• ghidra: do not run Java from a relative JAVA_HOME in doctor and setup (04a516b)
• ghidra: do not run Java from a relative JAVA_HOME in doctor and setup (c3f1698)
• ghidra: encode Java probe output as UTF-8 (#2206) (59be866)
• ghidra: enforce request limits before encoding (#6917) (a45ee81)
• ghidra: exclude synthetic entry references (3d2846f)
• ghidra: explain keg-only JDK admission remediation (ae07d15), closes #4556
• ghidra: explain server restart for timeout recovery (#5356) (4668cea)
• ghidra: expose terminal-call boundary assumptions (69a8b3a), closes #1658
• ghidra: fail doctor when the JVM os.arch selects an unvalidated decompiler directory (#2792) (20e4f83)
• ghidra: harden location resolution and provider lifecycle (1f5be75)
• ghidra: import HashMap in the bridge script (#2844) (204a6f3)
• ghidra: invalidate synthetic entry reference snapshots (#3728) (3d2846f)
• ghidra: isolate optional nativeaot script sources (3df67c6)
• ghidra: join shared NativeAOT derivation and retain outcomes (5120eb4), closes #4753
• ghidra: keep and name a runtime directory that close could not remove (5b769d3)
• ghidra: keep and name a runtime directory that close could not remove (b79d379), closes #1190
• ghidra: keep JVM warnings out of LaunchSupport output (#1698) (e20994a)
• ghidra: keep the cross-format branch callee multi-block (f1231d4)
• ghidra: keep the cross-format branch callee multi-block (e10c934)
• ghidra: keep the NativeAOT target refusal's own recovery advice (f198993)
• ghidra: make qualified function renames idempotent (4458128)
• ghidra: name the startup deadline setting when startup times out (#4590) (1b56237), closes #4241
• ghidra: narrow fallback probe failures before projection (98ddd04)
• ghidra: normalize Mach-O imported symbol names (f88c990)
• ghidra: own configured profile artifact lifetimes (f9ccacc)
• ghidra: own Java prerequisite probes through final cleanup (cc2e18a)
• ghidra: own operation-scoped JVM failure evidence (91884c3), closes #4682 #5220
• ghidra: own PSP inspection finalization (b0ddb58)
• ghidra: parse long procedure selectors without recursion (480b16b)
• ghidra: pre-create the launch-support config directory (#2470) (0ca70e1)
• ghidra: prepare ownership before Java probe deadline (376eeca), closes #4793
• ghidra: preserve catalog and metadata admission failures (3e11259)
• ghidra: preserve decoded return flow evidence (b189c3c)
• ghidra: preserve decoded return flow evidence (bcc8a77)
• ghidra: preserve function facet and call coverage (#3002) (242e2b0)
• ghidra: preserve function references and snapshot boundaries (84a17d5)
• ghidra: preserve launch outcomes through cancellation and rollback (1e36e70), closes #4517
• ghidra: preserve lifecycle ownership and failure provenance (9d940c2)
• ghidra: preserve load-image completion through cancellation (9c56d09), closes #3977
• ghidra: preserve MIPS overrides and filter entry metadata (50dd9fc)
• ghidra: preserve native endpoint diagnostics (5970a71)
• ghidra: preserve partial dossiers on decompiler failure (#4650) (c374c2f)
• ghidra: preserve PE PDB coverage facts (#2933) (0f55f24), closes #2259
• ghidra: preserve POSIX runtime paths with spaces (80c3d36)
• ghidra: preserve request and shutdown failure diagnostics (#647) (19f8cdd)
• ghidra: preserve source failures and snapshot ownership (704fa76)
• ghidra: preserve stable JDK registration paths (c062788)
• ghidra: preserve Unicode boundaries without breaking sessions (bef234d)
• ghidra: preserve unknown PDB application state (bcc8845), closes #2534
• ghidra: preserve unknown process stop facts (f118922)
• ghidra: preserve valid Unicode language metadata (3cfa00a), closes #4712
• ghidra: preserve Windows batch invocation semantics (0ac418d)
• ghidra: publish Windows verification success after cleanup (7633dd8)
• ghidra: qualify defined-string search coverage (4733fc8), closes #1659
• ghidra: read UTF-8 signed language definitions (#2772) (ec4f4dd), closes #2533
• ghidra: reconcile GNU MIPS ABI declarations (9387282), closes #3096
• ghidra: recover evidenced switch cases and default targets (#579) (b225b0f)
• ghidra: recover regex stack exhaustion without losing annotations (bc4aa46)
• ghidra: recover returning import callers (49e6f00)
• ghidra: recover stale clients on same-target reopen (#2014) (4573e8c)
• ghidra: refuse ambiguous universal Mach-O imports (b1b687f)
• ghidra: refuse ambiguous universal Mach-O imports (6582b24)
• ghidra: refuse PSP targets with unexamined ABI declarations (#3904) (ab45bf6), closes #3329
• ghidra: reject a native decompiler built for another host (#1280) (3728c82), closes #1192
• ghidra: reject address names owned by another symbol (aa7c5b7), closes #1649
• ghidra: reject address truncation before reads and edits (dcae3c6)
• ghidra: reject byte matches outside searched coverage (#4531) (a040533)
• ghidra: reject conflicting address aliases in batches (7bb4ac2)
• ghidra: reject JDK_JAVA_OPTIONS argument-file platform overrides (3d472bd)
• ghidra: reject relative installation and Java paths in doctor and setup (8998438)
• ghidra: reject relative installation and Java paths in doctor and setup (5356856), closes #1183
• ghidra: report a DOL language override conflict as a configuration error (#7081) (c74d302)
• ghidra: report kernel OOM kills as a memory constraint (#6748) (960b742)
• ghidra: report NativeAOT host and target refusals as unsupported, not failures (cfb49eb)
• ghidra: report NativeAOT host and target refusals as unsupported, not failures (42c276a), closes #1185
• ghidra: report progress while startup is pending (#1877) (29d2624)
• ghidra: report unapplied PE CodeView PDB limitation (#2283) (729ca2a)
• ghidra: resolve exact external function entries (549effa)
• ghidra: resolve file offsets in decompile (#2101) (2995ec6)
• ghidra: resolve keg-only Homebrew openjdk on macOS (#4556) (#4557) (8267edc)
• ghidra: resolve secondary symbols at function entries (#1195) (6fbdbd6)
• ghidra: retain executable header read and cleanup ownership (e31aa72), closes #4676
• ghidra: retain function boundary limitations on references (01a1b3f)
• ghidra: retain launcher command outcome in launch failure diagnostics (#2011) (d4e8ef7)
• ghidra: retain measured facts through NativeAOT failures (a43ce8a)
• ghidra: retain neutral recovery for observed SIGKILL (ecfac46)
• ghidra: retain process ownership after failed launch rollback (07675f7)
• ghidra: retain request limits and startup cleanup (5f0d18a)
• ghidra: retain scoped failures through process finalization (d52a488)
• ghidra: retain snapshot outcomes and join reader cleanup (73965f9)
• ghidra: retain stable Homebrew installation aliases (7c6142e)
• ghidra: retain typed Java prerequisite outcomes (c75cf82)
• ghidra: retry retained language catalog closes before admission (#6210) (292fd53), closes #6133
• ghidra: return complete native analysis results (a66e43a)
• ghidra: select exact packaged bridge scripts (#800) (894c30e)
• ghidra: share Java properties semantics with PSP extension admission (b953f96)
• ghidra: skip the Java probe without an installation (#6282) (002e1b6), closes #6200
• ghidra: stop dereferencing the removed error payload in address verification (b80bd2d)
• ghidra: stop dereferencing the removed error payload in address verification (59fbaa2)
• ghidra: stream DOS MZ overlay attestation (2f9b9c4), closes #4770
• ghidra: treat format-specific disabled analyzers as not applicable (#5425) (9c81191)
• ghidra: try keg JDKs after failed PATH launchers (6ff6825)
• ghidra: use dot-free private session paths (c3fc6c3)
• ghidra: use resolved type addresses for NativeAOT metadata (e598b46)
• ghidra: validate Windows control characters explicitly (4dccbec)
• ghidra: verify dense jump tables on an optimized fixture (#1374) (73a664b)
• ghidra: warn when callee/caller reads stop at a truncated function body (#2360) (6637161)
• go: accept file-backed unmapped Mach-O debug segments (7fb097d)
• go: classify JVM class files instead of universal Mach-O for CAFEBABE bytes (#2458) (48b92e1)
• go: distinguish dependency coverage from parse completeness (a050927)
• go: honor amd64p32 pointer width (98a2322), closes #6590
• go: read inline build strings from ELF mappings (3863590), closes #6716
• go: retain completed artifact facts through finalization (3f519c5)
• go: reuse PE content spans for build metadata search (266dd1d)
• gpu: accept numeric percent-prefixed PTX identifiers (5af154f), closes #6771
• gpu: accept percent-prefixed PTX entry names (2dfcc64), closes #6592
• gpu: accept PTX compute target aliases (f250c8c), closes #6494
• gpu: accept PTX entries without parameter lists (e44899d), closes #6493
• gpu: bound embedded section reads (8695ca8), closes #6657
• gpu: compare AMDGPU processors from parsed target facts (09ba168)
• gpu: derive legacy bundle extents from codec framing (f6a1e2c)
• gpu: distinguish host descriptor failures from invalid targets (fc63fe8), closes #6666
• gpu: keep unknown targets out of exact filters (0205f87), closes #6599
• gpu: own CCOB boundaries and payload representations (635f673), closes #6887 #6880
• gpu: parse legacy PTX body parameters (6442329), closes #6594
• gpu: preserve declaration grammar and partial resource coverage (39a91d4), closes #6844 #6823 #6858 #6868 #6861
• gpu: preserve parameter and target declarations (25aa298), closes #6624 #6625 #6626 #6618 #6613 #6606
• gpu: preserve PTX and AMD target facts (06828b2), closes #6469 #6483
• gpu: preserve PTX parameter and target facts (aa52ff6), closes #6664 #6675 #6680 #6695
• gpu: resolve extended CUBIN symbol sections (00a9e95), closes #6600
• gpu: retain resources across entry pragmas (42086fd), closes #6651
• graphs: separate source identities from display representations (a6f76f5)
• harden evidence lifecycle and MCP contracts (5155924)
• harden PTY events and configured roots (ae8b1c5)
• harden PTY events and configured roots (31b40f3)
• harden structured configuration comparisons (#467) (6901edc)
• harmony: exclude raw resources from manifests (b443b5a), closes #6638
• harmony: retain path-only package and signing observations (ebe4e87)
• hermes: detach aliased server tables before editing (#3785) (4a90059)
• honor empty URL query and fragment markers (#2091) (af29247)
• hopper: add bounded analysis recovery (e0bc7fd)
• hopper: allow restart after verified owned-provider shutdown (1c12349)
• hopper: bind analysis to the active target and correct boundary contracts (2f71375)
• hopper: bind file mappings to verified source bytes (82626c4)
• hopper: bind ordinary executable opens to selected bytes (c70f5f3)
• hopper: bound bridge request frames like the Cutter bridge (#5262) (26573c3)
• hopper: cancel analysis and close documents reliably (179870e)
• hopper: cancel startup before closing (f471a63)
• hopper: cancel startup before closing (6cc2fdf)
• hopper: complete owned Linux shutdown (#116) (fb51874)
• hopper: diagnose MCP provider failures with stage, state, and request context (#1044) (5a67c7f)
• hopper: drain retained publishers after current close failure (25b28ff)
• hopper: enforce caller-supplied request deadlines (#1119) (e8939ca)
• hopper: isolate regex matching from the native API thread (f201b04)
• hopper: keep an observed launcher exit over a later cancellation (#5816) (5c8d5b2)
• hopper: keep automated Linux setup off non-x86_64 hosts (#3422) (86655ea)
• hopper: keep installed apt dependencies at their versions during Linux setup (#6974) (a5bfd04)
• hopper: keep the OS error when the FAT64 source cannot be reopened (9f5dc52)
• hopper: launch analysis without stealing focus (ff321dc)
• hopper: let failed one-shot commands exit while retaining a lease (#1763) (e8528ce)
• hopper: load verified FAT64 slices with native Mach-O semantics (0a49d5b)
• hopper: make loader selection non-interactive (2b7ef86)
• hopper: normalize native block endpoints and retain terminal evidence (2847311)
• hopper: own bookmark API capability checks (51612c8)
• hopper: own Mach-O preparation through cleanup retry (b231c28), closes #5688
• hopper: pass private X authority cookie through stdin (324ca94)
• hopper: prepare deterministic FAT32 analysis slices (cf806ea)
• hopper: preserve an explicit display number zero in the X11 helper (#5214) (c2fe0c6), closes #5189
• hopper: preserve caller abort reasons on cancellation (#5780) (4a7a4b5)
• hopper: preserve launcher evidence on readiness timeout (458771c)
• hopper: preserve native navigation and annotation semantics (f2e22e1)
• hopper: preserve observed process failures across requests (#1927) (601814e)
• hopper: preserve owned basic-block endpoint instructions (#1118) (329cf20)
• hopper: preserve partial native call and string evidence (2461702)
• hopper: preserve startup failures and recover denied launches (069308b), closes #1808
• hopper: preserve streamed Unicode lease owner identities (5a28a14)
• hopper: preserve typed string values and verify real searches (7d7b3f9)
• hopper: preserve unknown relationship completeness (23664ef)
• hopper: probe interior navigation from multi-byte instructions (#1285) (bf934d5)
• hopper: recognize stripped Objective-C class labels (22c84ce), closes #5617
• hopper: recover from a Spotlight not-found launch (#2795) (4d98123)
• hopper: recover provenance-verified Spotlight exits (4acda94)
• hopper: report invalid regex patterns as pattern input errors (#6372) (4f8465d)
• hopper: report launcher failures before bridge timeout (#1105) (cd756b0)
• hopper: reserve Linux demo application before launch (#1158) (33d5ae0)
• hopper: resolve FAT loaders and original file coordinates (35f1ddd)
• hopper: retain failed private-display probe cleanup authority (2fe5d97)
• hopper: retain search failure context and cleanup ownership (5853089)
• hopper: retain shutdown request diagnostics (8d7071d)
• hopper: retain shutdown request diagnostics (7254871)
• hopper: return addresses for procedure relationships (2c707ab)
• hopper: select verified Linux demo mode explicitly (46e4052)
• hopper: select verified Linux demo mode explicitly (04c5fd6)
• hopper: share launcher discovery across setup and runtime (7582f0d), closes #3054 #3085
• hopper: shut down the Linux demo helper orderly so its X lock is removed (#4966) (af42f85)
• hopper: skip non-file launcher candidates (044fb91)
• hopper: stop Linux demo children when the REA owner exits (#2499) (c105391)
• hopper: treat a directory launcher path as missing (#1426) (afdaf98)
• hopper: validate annotation destinations and symbol extents (b2d5bc1)
• hopper: verify and repair the Linux embedding runtime (#5041) (b0b485a)
• hopper: verify bookmark names and clear existing labels (fd7da77)
• hopper: verify current Linux releases with the publisher key (70cd4cb)
• hopper: verify lease cleanup and repair the macOS test lane (#1111) (b743bd2)
• hopper: verify publisher before probing private display (#5346) (d72021b)
• hopper: wait for late bridges during cleanup (#1866) (cf7477e)
• http: preserve legal response header names (#6936) (c350343)
• i18n: correct Korean website translations (#3799) (313a86a), closes #3798
• i18n: correct Turkish website terminology (#4166) (56738f3)
• ida: attribute startup failures and retain cleanup ownership (8f65d7f)
• ida: bound readiness requests by the remaining deadline (fb6e2b0)
• ida: canonicalize the headless workspace root before opening (#1481) (de619bd)
• ida: compare admitted document paths consistently (890bb66)
• ida: declare GUI navigation for attached legacy analysis (#1764) (cf69207), closes #1712
• ida: exclude transport secrets from analysis identity (9927cd1)
• ida: ignore released worker rows when verifying close (#4234) (b6e6d7c)
• ida: keep omitted callee truncation markers unknown (#4286) (cc4ed5b)
• ida: let one-shot commands exit after retaining cleanup (#1841) (5dd2ce3)
• ida: mock legacy list_functions in attached transport tests (c85abac)
• ida: own registration reads and bind selected configuration (dd0015a), closes #5561 #5559 #5604
• ida: preserve busy details across timeout attribution (19f3672)
• ida: preserve native coverage and verify returned values (#2324) (37b7550)
• ida: preserve native workspace admission and startup outcomes (52aeeee), closes #6828
• ida: preserve non-x86 call edges and workflow uncertainty (#1906) (0ae38e1)
• ida: preserve producer failure and caller abort outcomes (a4e9b61)
• ida: preserve readiness and workspace refusal semantics (99ccfb6)
• ida: preserve registration recovery facts in readiness (264862b)
• ida: preserve SDK request timeout identity and captured output (c0cfccb)
• ida: recover cleanup after worker sessions are reaped (12fa8fd)
• ida: refuse universal Mach-O targets in attached profiles (#4765) (83d2780), closes #3871
• ida: report a procedure IDA cannot resolve as invalid input (#1785) (d3e9ee5)
• ida: report missing tools when a compatibility profile mismatches (#2307) (beca34f), closes #2301
• ida: retain analysis profile in partial operation evidence (#4645) (126b6e2)
• ida: retain bounded stderr on upstream transport failures (#2449) (30e9b83)
• ida: retain cleanup facts and let one-shot commands exit (#2814) (7369b5e)
• ida: retain private input after ambiguous open (#1845) (4ea24f9)
• ida: retain private input after unverified open (4ea24f9)
• ida: retain registration constraints and identity refusal guidance (75dfd1c)
• ida: separate explicit secrets from HTTP credentials (455f816)
• ida: share concurrent session cleanup (#950) (f14b6a8)
• ida: share string-page failure interpretation (bfacfba)
• ida: stop the private input of a universal Mach-O at the end of the selected slice (#2291) (c6acd19)
• ida: supervise regex inventory matching (#4862) (db8556e)
• ida: thin the selected FAT slice into the private headless input (#2201) (10400fd), closes #2139
• ida: wait out a transient busy worker health in headless sessions (#1778) (0bdc7a4)
• identify missing Electron lineage ownership markers (6739b3c)
• identity: preserve invocation uncertainty and advertised catalogs (187f113)
• il2cpp: accept names in native type-reference views (af3f025)
• il2cpp: consume resolved ELF program declarations (87745af)
• il2cpp: decode valid shared-suffix string offsets (4c5fae5), closes #6808
• il2cpp: deduplicate aliased metadata registration (8cd10d4), closes #6715
• il2cpp: deduplicate aliased registration fields (f40bd0c), closes #6715
• il2cpp: deduplicate consistent ELF registration aliases (d31e426), closes #6715
• il2cpp: distinguish rank-one array types (667f73a), closes #6534
• il2cpp: honor loader pointers and registration field layout (26031bc)
• il2cpp: link arm64 builds whose registrations were inlined (#6989) (149b43e)
• il2cpp: name the metadata file when linking finds malformed metadata (#6425) (19d9757)
• il2cpp: preserve loader ownership and ABI field boundaries (52ca222), closes #6881 #6873 #6871
• il2cpp: preserve recognized truncated metadata prefixes (b3aadaf)
• il2cpp: refuse a seed path under a non-directory as caller input (#6271) (2d91e2d)
• il2cpp: reject duplicate method tokens per image (139fd52), closes #6610
• il2cpp: track unresolved ELF relocation widths (bdf13a6), closes #6701
• il2cpp: validate generic-container extents before index widths (fa8b87c), closes #5751
• importer: reach package-main selection for trailing-slash directory references (#4219) (791524c)
• input: classify JSON failures at their producing boundary (2846cc0)
• inspector: bound retained metadata and preserve cancellation (e714fb0)
• inspector: preserve discovery uncertainty and correction paths (3602cc8)
• inspector: preserve lossy Node discovery locations (#542) (84e4361), closes #530
• inspector: preserve script identity and parse-failure facts (56685c6), closes #6535 #6546
• inspector: retain captures through authorization cleanup failures (09b188b)
• inspector: retain observations after capture failures (dea3498)
• inspector: retain usable targets and cancel owned capture waits (55778f2)
• install: describe automatic setup and guard truncated downloads (#1902) (d802304)
• installer: validate exact semantic versions (#954) (248972f)
• install: guard empty prefix_args expansion on macOS Bash 3.2 under set -u (#1061) (68b9fa4)
• install: honor redirected setup diagnostics (8b18171)
• install: share arguments between the plan and npm execution (60fbb2f), closes #1417
• integrate 14 approved fix PRs (668,671,673,675,678-681,685-690) (#705) (cf06115)
• integrate 24 reviewed browser/native/semantics corrections (#815) (3af3811)
• inventory: require released cleanup before capability fallback (27e927f)
• investigation: scope automatic unknowns to result Evidence (95c8f57), closes #3333
• io: consolidate managed snapshots and retain cleanup ownership (98d8470)
• io: retain cleanup ownership and honor cancellation (d8c76b6)
• isolate Linux inventory and repair DEX schema regex (#2910) (69bd81f)
• javascript-semantics: keep emitted data out of dispatch listener fields (#2952) (090b454)
• javascript: accept empty semantic property seeds (#4239) (3eeada7)
• javascript: accept the Wakaru 1.x release line and verify 1.14.0 (#1540) (ded5968)
• javascript: admit CommonJS bare scoped package directory resolution (#4838) (09de00b)
• javascript: advertise the exact empty seed rule and match empty API keys (35e5508)
• javascript: align module lookup and source evidence (b58adaf)
• javascript: allow cancellation during semantic graph commitment (#1218) (9405bd6)
• javascript: analyze source maps with empty source names (58ef8ac)
• javascript: analyze sources containing empty string literals (e7cbfe0)
• javascript: analyze sources containing empty string literals (11fc3b9)
• javascript: apply loader-owned module lookup rules (c0904b4)
• javascript: associate requested bindings only with resolved native addons (#6402) (630e6be)
• javascript: attribute service workers to intact platform paths (396b89c), closes #3841
• javascript: avoid argument limits when expanding escaped receivers (bace2c5)
• javascript: avoid endpoint payload copies in graph metadata (#1423) (98022a8)
• javascript: avoid event payload copies in graph metadata (#1427) (f4a0c1c)
• javascript: avoid invented computed destructuring properties (#507) (80777d9)
• javascript: avoid positive-zero evidence for signed zero (9055bd6)
• javascript: bind bundle exports and mutations to factory roles (5cbcd58)
• javascript: bind factory export roles to parameter values (f774dc4)
• javascript: bind named class expressions in their class scope (#510) (55f0267)
• javascript: bind native handoffs to canonical byte identity (c7f6b8b)
• javascript: bind Next page admission to source context (5ee5e49)
• javascript: bind response endpoints only from writes that reach the read (#4759) (f1ab595), closes #4606
• javascript: bound cyclic mutation captures by their paths (#6986) (dd02d8f)
• javascript: bound local getter-result expansion (0c7b6d8)
• javascript: bound loop capture and rest-copy expansion (cd1878f)
• javascript: bound member-mutation paths through reassignment loops (2859527)
• javascript: bound precise alias projection histories before expansion (4394e8b)
• javascript: bound primitive string growth and repeated evaluation (4a1837d)
• javascript: bound query unions and refresh semantic fixtures (6323013)
• javascript: bound self-alias mutation paths that never prune (e365f37)
• javascript: bound semantic expansion and resolve lexical receivers (16f4609)
• javascript: bound semantic node projection for resource safety (#966) (96a46ad)
• javascript: bound semantic unknown retention at projection (f4322b1), closes #4797
• javascript: bound static getter reference expansion (880b3a5)
• javascript: bound value evaluation through nested closure aliases (#1941) (d59ab6d)
• javascript: capture primitive return values at evaluation (27b077e)
• javascript: centralize module syntax and separate erased type dependencies (1b95302)
• javascript: classify application input selection failures by cause (fe5291e)
• javascript: classify application input selection failures by cause (0a14bbb)
• javascript: classify assignment targets and retain compound-assignment reads (#537) (333d118)
• javascript: classify direct defaults and argv elements (6495171)
• javascript: complete large-ASAR analysis with file-local projection (#1055) (b9fb438)
• javascript: consume per-field CommonJS publication facts (9c4d194)
• javascript: converge cyclic aliases with explicit projection widening (e4c3d72), closes #4348 #5138 #4349 #4364
• javascript: correct lexical and dynamic scope analysis (#538) (6fa6f1f)
• javascript: count all source line terminators (e60aa11)
• javascript: count all source line terminators (03bc6d3)
• javascript: count one IPC observation per site-resolved channel (#5810) (705058f)
• javascript: declare owned analysis worker effects (e9a71ef), closes #3867
• javascript: decline source-map UNC references with an unusable host (#1372) (f504c2a)
• javascript: decode literal file URLs at the path boundary (7e1c560)
• javascript: deduplicate shared projected source facts (446333c)
• javascript: derive loader references from lexical binding ownership (eef4a0b), closes #2989
• javascript: derive loop cardinality from exact literal values (c3e4238)
• javascript: derive program strictness from parser context (002f9df)
• javascript: distinguish deferred bootstrap installer writes (9fb63ad)
• javascript: distinguish file URL paths from query identity (f43fc02)
• javascript: distinguish Map lookups from network endpoints (fbfdb6a), closes #4853
• javascript: distinguish prefix-only builtins from packages (2b4abbf)
• javascript: distinguish relocation from application changes (556504e), closes #4520
• javascript: distinguish resolver discovery from module loading (f91b7f8)
• javascript: drop built-in effects for visibly replaced globals (#4565) (7436ac8), closes #3367
• javascript: enforce semantic byte bounds for literals (9f8659e)
• javascript: exclude class member keys from lexical reads (c0b3cd1)
• javascript: exclude erased imports from runtime bindings (#6994) (be2811e)
• javascript: exclude HTML URL suffixes from path admission (#2833) (1f122c0)
• javascript: exclude overwritten Electron API identities (#1664) (29cc1b8)
• javascript: exclude TypeScript this annotations from runtime parameters (#2761) (1ae9000)
• javascript: expand an escaped receiver's methods once (#1495) (#1517) (46c9cba)
• javascript: expose result schema failures (6d1f39b)
• javascript: expose result schema failures (99263a7)
• javascript: filter keyed-collection receivers only for get/delete (00f707b)
• javascript: follow actual receivers in nested intrinsic calls (#1912) (9d8e42b)
• javascript: follow bundler namespace interop for Electron APIs (#1827) (6ac5c36)
• javascript: handle deep AST traversal and addition without stack overflow (#915) (62b3711)
• javascript: handle deep static member paths (#939) (348c65c)
• javascript: handle oversized inline source maps (#1386) (5fc4d79)
• javascript: hash graph and evidence JSON incrementally (#646) (9f42495)
• javascript: honor cancellation before evidence publication (#1098) (cc0ee2e)
• javascript: honor computed keys when naming callables, exports, requests and options (#536) (4c8dc39)
• javascript: honor final RPC object properties (b8eea78)
• javascript: honor module-sync package exports (#1361) (d0e6069)
• javascript: honor package exports before sibling files (3ad5782)
• javascript: honor package exports condition order (#591) (8289595)
• javascript: ignore bare CommonJS exports rebinding (8b2f851)
• javascript: ignore erased TypeScript names in native-addon requests (#2766) (06739ae)
• javascript: include response carriers in endpoint traces (ab13a1c)
• javascript: index repeated graph observations before final sorting (6d5d71f), closes #1748
• javascript: invalidate Electron reads after direct eval (#7053) (26e1559)
• javascript: invalidate references stored through property targets (#1445) (e09cfe9)
• javascript: invalidate stale facts across direct eval (9ac76d3), closes #4875
• javascript: isolate lexical loop bindings (#511) (c30878f)
• javascript: isolate package facts from host prototypes (610966b)
• javascript: isolate source analysis and retain bounded partial evidence (#1651) (4999e4b)
• javascript: keep ASAR-named files without an ASAR header opaque (#2347) (dd4bfed)
• javascript: keep bare relative URLs for computed-method XHR (e32028d)
• javascript: keep CommonJS percent bytes literal (#3001) (80592b8)
• javascript: keep CommonJS require file URLs unresolved (#2077) (352c46a)
• javascript: keep computed-method XHR request URLs (602d002)
• javascript: keep configuration setting reads out of endpoints (#2402) (23f7214)
• javascript: keep dependency manifests out of application roots (7405097)
• javascript: keep digestless bundle matches unknown (5a76aaf)
• javascript: keep directory-form HTML URL references distinct from files (#4646) (75575f2)
• javascript: keep empty URL path segments significant (#3792) (90c6922)
• javascript: keep encoded URL slashes inside one runtime path segment (#6259) (1639189), closes #5878
• javascript: keep exact empty env keys and method names (522c2d0)
• javascript: keep exact empty env keys and method names (f7954a8), closes #783
• javascript: keep exact empty require paths and request fields (ad1f6b5), closes #783
• javascript: keep exact empty values in graph identities (f608127)
• javascript: keep exact empty values in graph identities (63012ee)
• javascript: keep exports out of write relations (81f7638), closes #3207
• javascript: keep invalid V8 script events out of policy filtering (6c06f40)
• javascript: keep keyed-collection reads out of endpoints (9075ce7)
• javascript: keep keyed-collection reads out of endpoints (eb68761)
• javascript: keep literal HTTP methods on storage-named receivers (9f48a76)
• javascript: keep literal-method and URL-literal requests on aliased receivers (e3e7664)
• javascript: keep logical assignment results uncertain for unknown values (#2788) (7e3a198)
• javascript: keep members unknown after a write through a local setter (#3831) (acca91d)
• javascript: keep mutated object initializer values unknown (#752) (6caa38a)
• javascript: keep overflowing timer delays unknown (#3456) (8443692)
• javascript: keep paths after __dirname inside the source directory (#2366) (f974353)
• javascript: keep recovered invalid templates dynamic in semantic effects (#3815) (4135c91), closes #3361
• javascript: keep releases through a replaced handle as candidates (#3897) (fc712b3), closes #3313
• javascript: keep source-module semantics independent of sibling bytes (30a9139)
• javascript: keep spread child argv counts unknown (#2748) (b19f9e4)
• javascript: keep storage open versions out of XHR endpoints (4f51103)
• javascript: keep storage open versions out of XHR endpoints (898b0f6)
• javascript: keep string Worker paths unresolved without a document base (#3797) (af6a998), closes #3309
• javascript: keep the request endpoint on a uniquely consumed response (#3822) (0323ce0)
• javascript: keep TypeScript substitution out of runtime paths (f8513a4)
• javascript: keep unmapped captured runtime scripts unknown (#6214) (e5d2805)
• javascript: keep unresolved created-loader bases unknown (7fd6e48)
• javascript: keep Vite dependency slots after a spread unknown (#4023) (d8199ab)
• javascript: keep Wakaru version stderr out of the refusal message (6489d58)
• javascript: keep XHR and client endpoints that receiver spellings hid (05f43ed)
• javascript: leave empty application values unlabeled (527b76e)
• javascript: mark resource-skipped files parse_status skipped (#3852) (77c8a1b)
• javascript: match exact empty literal channels and seeds (e20da1f)
• javascript: match feature seeds against their owning source values (44c9d29)
• javascript: match source-map originals that name parent directories (#1215) (889fb37)
• javascript: match unchanged module exports across application versions (#5196) (5d3ae66)
• javascript: name heap and semantic ceilings (#6022) (a0214e0)
• javascript: never read window or document open as XHR (ae849a7)
• javascript: normalize package URLs before array selection (#1916) (369cd3d)
• javascript: omit self-referential import edges with disclosure (#1130) (1d7115b)
• javascript: omit self-referential static references with disclosure (#1157) (b620e2a)
• javascript: own reference roles and invocation result identities (965aff8)
• javascript: parse declaration artifacts in ambient mode (4896adc)
• javascript: parse explicit CommonJS wrapper syntax (#2475) (6a04f92)
• javascript: parse ignored tokens throughout GraphQL headers (a9af471)
• javascript: parse JavaScript sources with JavaScript grammar (#3782) (44b197f), closes #3780 #3670
• javascript: parse plain TypeScript artifact dialects (#1102) (3db4681)
• javascript: prefer package entrypoints over directory indexes (#575) (bb91abd)
• javascript: preserve agreeing module provenance (db171be)
• javascript: preserve alias and container uncertainty (73e98b2)
• javascript: preserve analysis applicability after interruption (#4207) (85eac7b)
• javascript: preserve and resolve complete source-map URLs (#1788) (ce845ba)
• javascript: preserve asterisks in block source-map URLs (#2728) (9240a4e)
• javascript: preserve builtin identity and share alias traversal (04672f2)
• javascript: preserve cancellation during worker preparation (2603891)
• javascript: preserve cancellation through recovery publication cleanup (eaa9616)
• javascript: preserve candidate trace ambiguity (8678b57)
• javascript: preserve canonical rest-array property keys (43bc6e1)
• javascript: preserve capture and property-key effect ownership (c6ac60a)
• javascript: preserve capture timing and detached receiver authority (da0480a)
• javascript: preserve capture-time guards and ordering (001851f)
• javascript: preserve case-sensitive Unicode seed identity (8c62a4a)
• javascript: preserve catch destructuring alias ownership (21097b1)
• javascript: preserve cleanup failures during preparation cancellation (#1654) (890dfa4)
• javascript: preserve CommonJS assignment result and receiver uncertainty (1e51c73)
• javascript: preserve CommonJS lookup and analysis provenance (#2306) (d005bd5)
• javascript: preserve computed Electron member uncertainty (3a4a63f)
• javascript: preserve computed Electron member uncertainty (1260cac)
• javascript: preserve container ownership for getter mutations (#2765) (eeeb4ca)
• javascript: preserve copied values and export publication lifetimes (2206822)
• javascript: preserve effective child-process stdio options (#4336) (de9371b)
• javascript: preserve effects through yielded array references (#1437) (0a14ca4)
• javascript: preserve Electron runtime entrypoint paths (#2742) (3a4d494)
• javascript: preserve empty ESM import names in provenance (#2797) (ed24604)
• javascript: preserve ESM path intent and artifact confinement (#2700) (6714fb1)
• javascript: preserve exact CommonJS export keys (5485483)
• javascript: preserve exact static property keys (#3480) (ce89706)
• javascript: preserve execution and invocation provenance (b8fab74)
• javascript: preserve factory export helper identity (0f3a15d)
• javascript: preserve failure provenance and cleanup ownership (566a9a1)
• javascript: preserve final RPC property and source-body ownership (12b3cdb), closes #3244
• javascript: preserve getter receiver mutation aliases (7956934), closes #1665
• javascript: preserve getter results on direct property writes (639b730)
• javascript: preserve graph facts across omissions and versions (30db499)
• javascript: preserve graphs with async chunk self-references (#1152) (7220166)
• javascript: preserve graphs within parent capacity (#1921) (0485cd3), closes #1911
• javascript: preserve guarded factory fallthrough (#4341) (2c75835), closes #3963
• javascript: preserve HTML carriage return source ranges (#1092) (23862af)
• javascript: preserve import-equals declaration and export evidence (#2062) (86fab11)
• javascript: preserve incoming callback target uncertainty (#4243) (42fc6c5), closes #3880
• javascript: preserve inherited aliases past erased class fields (#5040) (9a21cd7)
• javascript: preserve initializer execution and lexical ownership (fba4faf)
• javascript: preserve lexical binding and default export capture semantics (dae1e55)
• javascript: preserve lexical open and exact template semantics (d6cc9ca)
• javascript: preserve literal CommonJS path punctuation (#576) (063cd25)
• javascript: preserve loader classification and exact source targets (75daf0c)
• javascript: preserve loader ownership and unavailable artifact facts (7e5cffa), closes #3213 #3214 #3223
• javascript: preserve loader-specific package ancestry (9f67e44)
• javascript: preserve local reference store ownership (07005b8)
• javascript: preserve map boundaries and loader provenance (ccba355), closes #6803 #6614 #6798 #6797
• javascript: preserve mapped runtime digest disagreements (d7651b6), closes #3316
• javascript: preserve module identity and boundary fields (b47055e)
• javascript: preserve namespace re-export relationships (#1833) (37a9eb9)
• javascript: preserve Next filesystem route spelling (ddd7ac7), closes #6641
• javascript: preserve Node exports fallback stop reasons (#606) (adc07f5)
• javascript: preserve observed worker failure ordering (3a91760)
• javascript: preserve original BOM source coordinates (#1093) (83defc0)
• javascript: preserve package and source-map boundary identity (#1939) (14935e4)
• javascript: preserve path reasons, module coverage, and property provenance (#5651) (53e0943)
• javascript: preserve path.resolve reset semantics (863ed47)
• javascript: preserve path.resolve reset semantics (4177377)
• javascript: preserve per-field publication and provenance coverage (f1a9d85)
• javascript: preserve POSIX runtime path case on Windows (#2422) (1a1b67c)
• javascript: preserve primitive addition coercion (#666) (94cc847)
• javascript: preserve property paths and uncertain slot presence (475a0f8)
• javascript: preserve recovery acquisition and cancellation failures (e00b2ed)
• javascript: preserve resource error reasons across worker frames (f2f8393), closes #3039
• javascript: preserve route flag values and lexical RPC names (38ecc02)
• javascript: preserve route selection owners and uncertainty (f97747c)
• javascript: preserve runtime path bytes and Electron ownership (#4941) (e9fc8fb)
• javascript: preserve semantic evidence through satisfies (e995b19)
• javascript: preserve semantic gaps for unparseable sources (d81d6b6)
• javascript: preserve semantic query identity and source coverage (cf5e4f6)
• javascript: preserve semantic uncertainty and lexical ownership (896696b)
• javascript: preserve source facts across graph projections (c8f8ec6)
• javascript: preserve source-map preparation capability errors (#6149) (3dbe314)
• javascript: preserve SQLite constructor provenance (fc847ff), closes #4854
• javascript: preserve trailing slash in package directory requests (#1615) (423b11c)
• javascript: preserve TypeScript loader and dependency semantics (e4532b5)
• javascript: preserve unavailable scope uncertainty in comparisons (8d198d6)
• javascript: preserve uncertain call targets across activation boundaries (3b02179)
• javascript: preserve uncertainty after references escape to calls (#1292) (355a292)
• javascript: preserve uncertainty in compound assignment results (#4342) (17488bd)
• javascript: preserve unknown branches in primitive unions (75a75cb)
• javascript: preserve unknown branches in primitive unions (9a2f395)
• javascript: preserve unknown module-alias provenance (c7a890d)
• javascript: preserve unresolved version relationships (4d980d0), closes #4681
• javascript: preserve values captured before later assignments (#4196) (0cc5649), closes #3881
• javascript: project decoded file URL paths (#810) (2572e1e)
• javascript: prove bundled CommonJS getter identity (6e34430)
• javascript: prove namespace interop before attributing Electron APIs (#1857) (9b3e598)
• javascript: prove native URL constructor paths (55437c1)
• javascript: read open() endpoints only from XHR method/URL pairs (63e0822)
• javascript: read open() endpoints only from XHR method/URL pairs (1be3705)
• javascript: read source-map directives only from comments (#672) (7f1fa64)
• javascript: read substitution-free templates as exact strings (c371d6e)
• javascript: read substitution-free templates as exact strings (77cf757)
• javascript: read utilityProcess.fork options from the argv slot (#6280) (73b7564), closes #6208
• javascript: recognize digits in artifact URI schemes (#1045) (03424ae)
• javascript: recognize Electron APIs through renamed bindings (817efac)
• javascript: recognize Electron APIs through renamed bindings (e4a8e0b)
• javascript: recognize unchanged var and let Electron aliases (0d2082d)
• javascript: reconstruct HTML script loads accurately (#1042) (1154f2f)
• javascript: recover child-process options without args (#2781) (c8e85b9)
• javascript: recover Electron API identity through aliases (2612e47), closes #1656
• javascript: recover Electron APIs through default imports and optional calls (#1673) (fe574c0), closes #1656
• javascript: refuse Webpack loaders that can fall off the end (#6007) (63b43b6)
• javascript: reject encoded separators joined by HTML URL whitespace (2ddd945)
• javascript: reject encoded separators joined by HTML URL whitespace (fb57c86)
• javascript: reject FIFO recovery inputs without blocking (#3788) (baad9ee)
• javascript: reject invalid package exports configurations (7a4f268)
• javascript: reject Webpack getters replaced through any identity write (#3860) (57f3002), closes #3315
• javascript: report application analysis progress on the CLI (#1008) (7b18c58)
• javascript: report available parent result budget in coverage limits (#1915) (72489a9)
• javascript: report colliding recovery inputs as input errors (#6520) (2944afa)
• javascript: report EventSource and sendBeacon URLs as network endpoints (#3044) (bbf0638)
• javascript: report fork's silent stdio as piped (#7083) (80673b2)
• javascript: report JSON status for imported package manifests (914ba83)
• javascript: report located sources with differing digests as modified (#1216) (01174c4)
• javascript: report malformed runtime context events as excluded (#4755) (6a40761), closes #4685
• javascript: report oversized recovery inputs as file-size limits (#4757) (31c87b4), closes #4629
• javascript: report path data records as route candidates (#6360) (5fbea61)
• javascript: require API identity for static application roles (5f13ddd)
• javascript: require complete receiver ownership proofs (2496256)
• javascript: resolve bare source-map and worker URLs next to the script (#890) (45fcd28)
• javascript: resolve bundled exports by binding identity (5ab0cbb), closes #2171
• javascript: resolve child ownership at receiver reads (#3819) (6d2eeea)
• javascript: resolve exported callables through lexical bindings (#1351) (a9f5dad)
• javascript: resolve HTML script URLs after URL whitespace and percent decoding (d601b80)
• javascript: resolve HTML script URLs after URL whitespace and percent decoding (502528c), closes #1236
• javascript: resolve module URLs and reject invalid exports targets (#1031) (8d5c88f)
• javascript: resolve module-relative Worker URL references (#2104) (653067d)
• javascript: resolve package exports targets only to the exact file (#1181) (2a620c0), closes #1174
• javascript: resolve proven URL constructor aliases (37f2412)
• javascript: resolve query-only HTML references to their document (55a46f7)
• javascript: resolve relative ESM URLs as exact files (783fcb0)
• javascript: resolve root package exports arrays (#1046) (53409ab)
• javascript: respect HTML base URL components (#589) (ffbde92)
• javascript: respect lexical shadowing of require (#509) (6a431d8)
• javascript: retain activation order for captured scope exits (1872fef)
• javascript: retain array identity after length mutations (4bcea1a)
• javascript: retain assignment and nested-default destructuring (bfb7ed0)
• javascript: retain bridge conditions on IPC joins (#2747) (c6166d4)
• javascript: retain cancellation after observed worker failure (f01dcca)
• javascript: retain CommonJS exports defined with Object.defineProperty (#4725) (bec88b9)
• javascript: retain compiler-dependent module resolution facts (c923fb0)
• javascript: retain completed facts through cancellation (#1934) (b6651cb)
• javascript: retain completed recovery hashes on cancellation (d442ac7)
• javascript: retain conditional mutation ordering uncertainty (b8a8190)
• javascript: retain configuration reads before member access (#2756) (72b9ab4)
• javascript: retain directive values in function fingerprints (6396851)
• javascript: retain distinct chunk registration callback metadata (#2737) (0cf224e)
• javascript: retain distinct module provenance path components (2bd7de6)
• javascript: retain early-return conditions in wrapped call paths (5031099), closes #3196
• javascript: retain endpoint candidates through graph projection (88afcc7)
• javascript: retain getter receivers through local aliases (#2778) (dea770d)
• javascript: retain guards without duplicating observed IPC calls (42b0ed1)
• javascript: retain implicit property conversion and disposal effects (905ae18)
• javascript: retain initialized class self binding at body reads (dd55e2c)
• javascript: retain nested artifact readers in caller scopes (684199b)
• javascript: retain NodeNext artifact source facts (#1087) (c1b370c)
• javascript: retain partial indexed source map facts (2b2e362)
• javascript: retain primary interruption through worker cleanup (ef00b21)
• javascript: retain private receiver and iterative disposal effects (7877268)
• javascript: retain property reads during updates (#508) (6b7923c)
• javascript: retain proven browser global receivers (45d0c3e)
• javascript: retain recovered call argument positions (#929) (e6ba9c3)
• javascript: retain returned-reference mutation uncertainty (#1471) (782e014)
• javascript: retain runtime candidate ambiguity (5e79d46), closes #3192
• javascript: retain runtime scope in bundled module relationships (c1217e7)
• javascript: retain selected application paths in Evidence (c4aaf81), closes #5258
• javascript: retain selected-root access and filesystem failure facts (77ed32f)
• javascript: retain shorter literal metadata encodings (#1408) (de8fc67)
• javascript: retain source map section paths on declarations (498a667)
• javascript: retain standalone GraphQL source operations (6688ed6), closes #3311
• javascript: retain static paths through TypeScript wrappers (#3998) (633e4ff)
• javascript: retain stored receiver capture authority (eb721eb)
• javascript: retain unavailable HTML reference scopes (f36893a)
• javascript: retain unavailable package metadata during resolution (322506d), closes #3213 #3278
• javascript: retain unavailable source processing scopes (1cc1612)
• javascript: retain unbound CommonJS semantic imports (3a17882)
• javascript: retain uncertainty for conditionally skipped writes (4105376), closes #2562
• javascript: retain uncertainty for missing source map mappings (a4dbb36)
• javascript: retain unresolved export iteration sources (cc4f805)
• javascript: retain unresolved network targets with provenance (018ab2c)
• javascript: retain unresolved value frontiers in provenance queries (3e19875)
• javascript: retain worker storage and projection failures (5f21aee)
• javascript: retain wrapped isolated-world bridge exposures (1c37914)
• javascript: scan direct returns without recursive stack growth (c29931c)
• javascript: scope candidate ambiguity to query traversal (6ad62ce)
• javascript: scope candidate ambiguity to query traversal (f94fc79)
• javascript: scope Next package admission by container identity (6103fdd)
• javascript: select timer handles at cancellation reads (6183544)
• javascript: separate endpoint syntax correspondence from target identity (f6b525d)
• javascript: separate erased types from runtime semantics (8900660)
• javascript: separate stored receiver and initializer traversal (2ff85c0)
• javascript: share accessor selection and invocation effects (6e324b2)
• javascript: share immediately returned loader facts (36f528e), closes #3535
• javascript: share iteration and equality invocation facts (e597e09)
• javascript: share source-map resolution and preserve path uncertainty (3ae826c)
• javascript: share TypeScript emitted import resolution (1dfb933)
• javascript: stop copying literals into semantic metadata (#1407) (8550913)
• javascript: stop reading media preload attributes as Electron preloads (649661d)
• javascript: stop replaying earlier writes for each object property write (1ec490f)
• javascript: store source map URLs once (ed8fcae)
• javascript: trace nested Electron bridge members (#2745) (f0b8ae1)
• javascript: trace wrapped Electron IPC paths in large bundles (#1874) (87b9793)
• javascript: track public CommonJS export receiver lifetimes (#3567) (7510404)
• javascript: track references returned by getters (bc7846d), closes #1494
• javascript: unify loader binding and mutation ownership (1b9b725)
• javascript: unify package resolution and resolve exact exports subpaths (#1424) (0e19db9)
• javascript: use Node legacy package entry fields (1706005)
• javascript: version syntax-aware structural fingerprints (0ef938f)
• javascript: yield during per-file projection and graph construction (#1525) (5fdb063), closes #1462
• javascript: yield during receiver and reference classification (#1557) (8c47a9c)
• javascript: yield during the largest AST traversals (#1545) (5d6eeb2), closes #1462
• javascript: yield inside semantic analysis and large projection passes (#1542) (ca7ef69)
• jeb: attribute transport timeouts to requested operations (d74e724)
• jeb: cache parsed metadata independently of optional version (67384b2)
• jeb: confine an invalid REA_JEB_MCP_URL to the JEB tools (#2145) (df2c08b), closes #2143
• jeb: isolate invalid timeout from shared startup (#3964) (d67d895)
• jeb: make upstream request deadlines configurable and preserve cancellation (097a4bc)
• jeb: probe live operations with owned discovery deadlines (a8887a9)
• jeb: retain cleanup ownership and acquisition outcomes (a6e8f52)
• jeb: retain requested operation during metadata probes (ece277b)
• jeb: retain selected inputs and completed primary replies (0f5ece1)
• json: name a leading byte-order mark in rejected JSON input (#1510) (a936303)
• json: preserve runtime limits across JSON file readers (#1350) (9c4a68b)
• js: resolve literal URL from Request constructor in fetch calls (#6364) (3984d12)
• keep execution options internal (167a824)
• keep the Ghidra session root free of dot-prefixed path elements (a8b8288)
• knip: ignore ps binary and in-file schema exports (9960982)
• kuna: answer a repeated single-function request without re-running Kuna (#4169) (62bf098)
• kuna: attribute installation failures to caller operations (5717ad2)
• kuna: attribute inventory failures to callers (54c7131), closes #4689
• kuna: bind version probes to stable executable identity (04ae07a), closes #5611
• kuna: keep the real lane's wide-string marker independent of layout (#4116) (cfd3c35), closes #1957
• kuna: keep the run slot of an unproven stop until close proves it (#4052) (f255899)
• kuna: list a cold target from the export's own inventory (#4062) (8ed3d1d)
• kuna: name the rejected address in list_strings input errors (#6269) (117ded8)
• kuna: name the setting that owns a timed-out Kuna run (#4343) (9be4938)
• kuna: own cancellable installation startup (988494a), closes #4698
• kuna: own version-probe processes through output and cleanup (ff78165), closes #5557
• kuna: preserve cancellation and cleanup ownership (5927937)
• kuna: preserve live cleanup in caller failures (6eb55be), closes #4693
• kuna: preserve ownership through cancellation and failed verification (#4029) (337d2e3)
• kuna: report a failed export as not retryable in its session (#4070) (a5024a9)
• kuna: report output beyond REA's buffer as deterministic and final (#4098) (b3b5c8b), closes #1957
• kuna: retain fallback diagnostics for empty stderr (6d52814)
• kuna: retain published exports through staging cleanup failures (bbf7943)
• kuna: retain setting-specific doctor recovery (9d8ede4)
• kuna: retain workspace rollback failures (264799b), closes #4704
• kuna: say why Kuna cannot answer instead of a generic message (#4113) (f7250fe), closes #1957
• kuna: share and bound single-function decompile runs (#4045) (670ad6b), closes #1957
• kuna: stream string scans instead of capping them at 16 MiB (#4318) (8ab5024)
• kuna: suggest no restart when a fixed buffer stopped the export (#4104) (736aa94), closes #1957
• kuna: verify a warm export once for concurrent first requests (#4049) (b6529bf), closes #1957
• ledger: authenticate evidence before committing (0407bbf)
• lifecycle: preserve observations and cleanup ownership (#4274) (1b97b0f)
• lifecycle: preserve ownership, cancellation, and cleanup outcomes (#4238) (0e1f0bf)
• lifecycle: reject session work once close has started (#6411) (592c3e2)
• lifecycle: retain Android and Kuna descriptors when close fails (#6363) (746a419)
• lifecycle: retain exact cleanup owners when close or prelaunch fails (#6357) (7501911)
• lifecycle: retain IDA cleanup owners and drain JEB fixture work (e97f47b)
• lifecycle: validate owned Hopper process identity (898d6b0)
• lint: preserve portable advertised patterns through autofix (4c680d0)
• linux: improve Hopper reliability and CachyOS support (#963) (98b2b02)
• linux: start Hopper demo sessions headlessly (32c5080)
• linux: start Hopper demo sessions headlessly (75818d1)
• lldb: preserve observed failures through interrupted cleanup (cc73587)
• lldb: retain completed trace facts through cleanup failures (#7023) (a1967fb)
• macho: infer legacy Intel simulator platforms (1280e7e), closes #6649
• macho: preserve ambiguous chained import names (5d0d243), closes #6648
• macho: preserve import identity in retained views (23e68cb)
• macho: preserve subtype labels across dylib consumers (0c49878)
• macho: recognize arm64_32 binaries (abbb1d7), closes #6581
• macho: share width-specific load command alignment (108c0e7)
• macho: validate FAT slice format and CPU identity (497037e)
• managed: accept immutable parsed type selection facts (6cfb998)
• managed: admit ReadyToRun images built for non-Windows hosts (#1985) (0d11f71)
• managed: attribute malformed comparison inputs to their arguments (96ad94f)
• managed: avoid duplicate decode budget charging on cached metadata strings (e26bb49)
• managed: bind graph facts to their source Evidence (cc7b5af)
• managed: bind inspection evidence to artifact identity (73b09f4)
• managed: bind row budget charges to metadata identities (#1897) (23d50ea), closes #1878
• managed: bound transient CIL by decoded instruction count (#1822) (554cb45)
• managed: budget decoding before representation expansion (0f0d6e4)
• managed: charge admitted member facts once in the final projection (#3487) (bddeae5)
• managed: charge retained member facts instead of decoding bounds (#1768) (3078729)
• managed: charge transient CIL by decoded instructions (554cb45)
• managed: classify 32-bit-preferred assemblies as platform neutral (#2342) (36132d3)
• managed: classify ReadyToRun images without ILONLY as modern .NET (#2075) (cdc41fc)
• managed: classify truncated signatures as malformed (#598) (1b6f054)
• managed: compare catch types by scoped nominal identity (ecd997e), closes #6760
• managed: compare nominal signatures across metadata builds (#3059) (eab789a)
• managed: compare observed call targets (c70eefa), closes #6630
• managed: compare retained declaring-type selection scope (091d620)
• managed: decode generic, array, fnptr, and modifier signatures (#1835) (1f531fc)
• managed: decode the CIL no. prefix (#2241) (e46bed7)
• managed: derive selected scope from parsed declarations (1f0eb22)
• managed: distinguish .NET Standard targets from runtimes (81dc64e)
• managed: distinguish metadata handles from member accesses (#607) (c73742f)
• managed: emit valid x64 conformance PE (dcd94f1)
• managed: emit valid x64 conformance PE (c52a822)
• managed: enforce module identity before joining token facts (b582b6e)
• managed: honor metadata ExtraData before table decoding (#1893) (fb43dd9)
• managed: honor native platform symbol lookup (64fa1db), closes #6926
• managed: index attribute constructor owners once per layout (#1943) (c2cf7dc)
• managed: match exact method bytes without decoded signatures (17809ca)
• managed: own source validation and reuse parsed evidence (2775135)
• managed: pair members by declared identity before name-free remaps (#2116) (1ebbc3b)
• managed: preserve enclosing identity in member comparisons (#3079) (1438422)
• managed: preserve literal library names during native matching (81b70bc)
• managed: preserve malformed signature uncertainty in comparisons (263a98c)
• managed: preserve member scope and nominal edge identity (357e354)
• managed: preserve native module names under platform loader rules (c409a8b), closes #6758
• managed: preserve negative zero in CIL operands (#2437) (6c816af)
• managed: preserve observed method header differences (#3814) (14c4c2a)
• managed: preserve page incompleteness in graph and comparison (a6f02a0)
• managed: preserve page incompleteness in graph and comparison (8ee0f04)
• managed: preserve verification input and coverage semantics (db923eb)
• managed: project metadata with empty names without a display label (#3853) (cf0a38a), closes #3352
• managed: recognize PE Thumb and ARMNT machines (#605) (0ce529a)
• managed: refuse non-PE inputs as unsupported targets (#6287) (3b2d286), closes #6076
• managed: report ExportedType rows in managed member inspection (#1828) (ed1519d)
• managed: report ILONLY-clear assemblies as mixed in boundary summaries (#3516) (1851f1f), closes #3366
• managed: report malformed PE layouts as invalid input (#2194) (90e37f4)
• managed: report metadata range failures at artifact file offsets (#3508) (2a9252e), closes #3364
• managed: report stream-name errors at file offsets (#4418) (2d95b85)
• managed: resolve member ownership through pointer tables (#1886) (a95795c)
• managed: respect native module case semantics (72dd48a), closes #6652
• managed: retain completed facts through close cancellation (1564fc8)
• managed: retain declaration kind and runtime implementation facts (bc2d494)
• managed: retain descriptor ownership through hash cancellation (fe2a398)
• managed: retain every source location (33b2099)
• managed: retain facts without inventing delta identities (fc2dddc)
• managed: retain nested names and ReadyToRun observations (87fa1b6), closes #6815 #6810
• managed: retain operand-free instruction anchors (483678b)
• managed: retain raw CIL changes in member comparison (#2912) (a9195c3)
• managed: retain type discovery after member limits (#5312) (371f3d9)
• managed: retain types after member limits (371f3d9), closes #5146
• managed: retain unknown catch identity beside observed name changes (529038f)
• managed: select types from retained definition records (bcd18d2)
• managed: separate metadata and signature completeness (2f02eff)
• managed: share first-match member list ownership (#1955) (7d92d93)
• managed: share first-match member ownership indexes (52e76c5)
• managed: share member list facts and retain verification uncertainty (3f6b575)
• managed: share native verification input diagnostics (#2901) (501c5d4)
• managed: share nominal scope across member comparisons (0785223)
• managed: share reference instruction semantics (749ae11)
• managed: share source identity and input failure ownership (4345a45)
• managed: treat extension-only module scopes as unknown identity (#5674) (c4b6aa3), closes #5467
• managed: validate CLI type selections with the member contract (#2125) (60259a9), closes #2121
• managed: validate metadata operands and locals declarations (6674028), closes #6578 #6572 #6558 #6513
• managed: verify Mach-O ABI-prefixed exports exactly (#3974) (5875fce)
• mcp: accept authentic native Evidence for managed boundary verification (#4761) (f03a559), closes #4639
• mcp: admit composed analysis through result bookkeeping (e11f4d3)
• mcp: advertise existing absolute path constraints (0e83d92)
• mcp: advertise explicit target cleanup when investigations finish (5a46fba)
• mcp: advertise input patterns without look-around (1f099a6)
• mcp: advertise input patterns without look-around (a8701ea), closes #1282
• mcp: advertise JSON values without recursive schemas (#995) (7425f70), closes #919
• mcp: advertise object roots for union input schemas (#1373) (39dabd0)
• mcp: advertise primitive semantic literal seeds (f62b449)
• mcp: advertise reserved process environment key (#949) (e0d76ae)
• mcp: advertise self-contained tool inputs (5e30969)
• mcp: align advertised contracts and retain workflow evidence (80de314)
• mcp: align runtime unknown argument validation (d1e7220)
• mcp: attribute doctor timeouts to owned deadline facts (2589c00)
• mcp: authenticate inventory facts before prompt completion (170bfc7)
• mcp: bind catalog identity to output schema profiles (c5fb86d)
• mcp: bound capture comparison input schema depth (#1005) (6b55de0)
• mcp: bound retained doctor stderr while draining output (ae433f0)
• mcp: bound SDK validation errors before transport delivery (7fb0a0c), closes #3221 #3267
• mcp: cancel evidence imports before session mutation (e5699d2), closes #1746
• mcp: centralize validated partial Evidence delivery (900f21b)
• mcp: clarify advertised schema fields (1581e40)
• mcp: clarify routing and advertise input examples (969519c)
• mcp: clarify target routing and caller diagnostics (3e1e8cd)
• mcp: count the error flag in error result budgets (#2848) (3e7c630), closes #2557
• mcp: cover prompt objectives in catalog identity (b57a054), closes #3222
• mcp: declare Frida status session mutation (#3902) (13d04a0)
• mcp: deliver tool errors within advertised schema contracts (da606ff), closes #1261
• mcp: deliver typed errors without invalid structured output (#1277) (7e96f25)
• mcp: derive shared provider cleanup from loaded ports (00dd959), closes #5222
• mcp: describe function comparisons in behavior tool (#5251) (b5442df)
• mcp: distinguish schema references from literal metadata (ba98130)
• mcp: emit portable Unicode NUL patterns (#1230) (aa5750c)
• mcp: emit valid schemas for empty arrays (#535) (4007b20), closes #528
• mcp: enforce initialization and discovery contracts (6eb9d09)
• mcp: escalate transient failures before asking for a restart (#6353) (791f632)
• mcp: express inspect_analysis_view selector constraints in the contract schema (#1705) (a8a9c4d), closes #1695
• mcp: flatten root union input schemas (#1062) (6a7650e)
• mcp: guide agents through tool error recovery (#5470) (e50a271)
• mcp: guide client and provider timeout recovery (#5608) (a356237), closes #5598
• mcp: hide managed workflows without a session (412bbaf)
• mcp: honor Frida partial evidence retention acknowledgments (36615d9)
• mcp: integrate managed contracts after rebase (9c4a93d)
• mcp: isolate optional observation adapter failures (#838) (be3cfbf)
• mcp: join owned doctor shutdown without signaling saved PIDs (7fc0b5e)
• mcp: keep a snapshot open ahead of later calls on the same connection (#3661) (73c72d5)
• mcp: keep advertised inputs within client reference budgets (#1749) (d86d29c)
• mcp: keep analyze_function progress strictly increasing (#3460) (3cfdc58)
• mcp: keep prompt completion within ready provider sessions (07b36c1)
• mcp: keep shared optional providers open across discarded probes (#2205) (7c9c1eb), closes #2195
• mcp: materialize catalog identity at the JSON boundary (ee9bf58)
• mcp: measure tool errors against their text-only delivery (fe34ec2)
• mcp: measure tool errors against their text-only delivery (7b51121)
• mcp: name response-byte and startup ceilings in recovery (#6005) (bdf0be8)
• mcp: normalize browser scenario input errors (#4661) (5a7e8a1)
• mcp: normalize compact schemas for strict gateways (#3806) (9750486)
• mcp: normalize inferred field descriptions (a807471)
• mcp: only recommend exporting retained evidence (5f749c2)
• mcp: own cancellation and raw input throughout startup (2a4c70e)
• mcp: parse adapter inputs exactly once (37c0f39)
• mcp: preserve exact guided prompt context (#761) (66c26f2)
• mcp: preserve investigation input policy (5a908a0)
• mcp: preserve investigation input policy (f4156d9)
• mcp: preserve JavaScript workflow identity validation (#1366) (53ed942), closes #1364 #1065
• mcp: preserve migrated revisions and valid links (4149472)
• mcp: preserve nested JSON values in compact array schemas (b3389a5)
• mcp: preserve procedure aliases and complete name ambiguity (d3627b1), closes #4623
• mcp: preserve retained evidence on oversized delivery (0639a54)
• mcp: preserve target provenance on retained partial errors (8fc2043)
• mcp: preserve tuple constraints in advertised schemas (10aa74d), closes #3576
• mcp: provide native evidence paging continuation (1449e8e), closes #1849
• mcp: reject unknown MCP tool inputs (#975) (fe64fd6)
• mcp: relax Boolean literals without narrowing valid inputs (a2e3016)
• mcp: release optional providers when transport startup fails (c482ddd), closes #3230
• mcp: remove arbitrary schema byte gate (fd08025)
• mcp: remove schema byte compaction (f728295)
• mcp: report Linux-only integrations as unsupported_host off their hosts (#5793) (5a311d8)
• mcp: report references a provider truncated in trace_feature (#2348) (af142f6)
• mcp: require absolute evidence bundle paths (3cf6206)
• mcp: require absolute JavaScript application inputs (4e7fb1e)
• mcp: retain complete application results across response limits (a1ed423)
• mcp: retain oversized errors before transport delivery (b3f1b4e)
• mcp: retain partial evidence through shared delivery (012959e)
• mcp: retain protocol envelopes when replacing oversized errors (562dab0)
• mcp: retain protocol framing for oversized tool errors (#5371) (4eaf3a1), closes #5273
• mcp: retain shutdown failure diagnostics (09c249d)
• mcp: retain shutdown failure diagnostics (fd008cd)
• mcp: retain shutdown signals until cleanup succeeds (8873b39)
• mcp: retry failed shutdown resources and retain failure reasons (e64678e)
• mcp: return complete inline Evidence records (#585) (ea9c3da), closes #551
• mcp: share inspection admission for prompt completion (07a501e)
• mcp: stop advertising complete Evidence in input examples (#1560) (a53689c)
• mcp: tolerate synthetic entrypoint paths during import (ef15377)
• mcp: validate doctor probe against its discovered output contract (#1461) (ea92328)
• metadata: preserve canonical PowerPC subject identity (e909a92)
• metadata: preserve declared phandles and relocation fields (72e75e9)
• metadata: stop schema changes churning generated skill evidence (#1075) (d52f66d)
• mips: retain unexamined RELR declaration coverage (22d3236)
• mobile: bound framework conventions to path segments (#1506) (a929c9f)
• mobile: classify authenticated file occurrences as components (a425b3e), closes #3349
• mobile: derive runtime hints from classified components (fc935d0), closes #3350 #4782
• mobile: share authenticated inventory projection sources (0281d10)
• model: accept released GGUF writer metadata and vocab-only output (7f61314), closes #6772 #6787
• model: admit safetensors header lengths that resemble pickle markers (#5918) (87657c6), closes #5895
• model: keep host I/O failures distinct from unavailable model targets (#6175) (54ea293), closes #6004
• model: preserve optional metadata and tensor alignment (5c77556), closes #6656 #6637 #6636
• model: preserve uncertainty across released GGUF layouts (6911a60), closes #6848
• model: preserve unsupported GGUF version diagnostics (#5789) (25bea07)
• model: recognize named chat templates in summaries (b6833b9), closes #6569
• model: retain completed GGUF facts on interrupted reads (eb41f35), closes #5625
• model: retain exact safetensors shape dimensions (0d44afe), closes #6627
• model: retain parsed headers when hashing is interrupted (eed99a5), closes #6684
• model: retain resolved GGUF alignment under cancellation (275095a), closes #6579
• name host and tool requirements in optional adapter refusals (68cb02f)
• name host and tool requirements in optional adapter refusals (170d0bf)
• native-ui: handle incomplete accessibility child collections (#944) (ac3bae3)
• native/windows: share FILE_SHARE_DELETE so owned objects can be marked delete-pending (#2445) (9b08c2b)
• native: accept declared facts in dispatch name inventory (#2906) (0c9ee56)
• native: accept universal binaries with LIB64 x86_64 slices (#1982) (4b653fe)
• native: admit thin arm64_32 Mach-O targets for static inspection (#5788) (861e17a)
• native: admit universal Mach-O files without a host slice (#5501) (6b8f4f7)
• nativeaot: charge only examined candidate table entries (6b0c4b4)
• nativeaot: preserve COPY bytes when hydration output grows (#6254) (14877a0), closes #5882
• nativeaot: retain snapshot digest mismatch and recovery (d8e90fe)
• native: attribute deferred Evidence input failures (f8876e5)
• native: bind core segment names to their architecture (462b73a), closes #6538
• native: bind dispatch snapshots to the local reader profile (0ba4d6f)
• native: bind NativeAOT metadata to declared PE section extents (76296c5)
• native: bind signature observations to registered target versions (#1099) (c789af0)
• native: bind signature snapshot cleanup to exact leases (4f3b573), closes #4734
• native: bind signing facts and preserve native output semantics (2721650)
• native: bind UI runtime cleanup to exact owners (04221e5), closes #4227
• native: bound captured output carried by native command failures (#2764) (5996d81)
• native: bound LLDB PID reads before validation (292e7be), closes #5057
• native: bound metadata projection and compact Mach-O bind runs (5d0a883)
• native: bound NativeAOT reads to declared PE headers (4a076f3), closes #4750
• native: bound PE resource RVAs by section virtual size (#1678) (38221cb), closes #1596
• native: bound retained observations and preserve failure evidence (7c32387)
• native: capture Mach-O header metadata alongside load commands (#525) (a8195ba)
• native: clarify Mach-O offset origins and reject partial ELF tables (8bd5ba2), closes #1973
• native: classify dyld refusals before export fallback (3fb2698)
• native: classify every Swift mangling prefix as invalid when undecodable (#3089) (f4df6ab)
• native: classify observed dSYM inspection refusal (f83d97f)
• native: classify PE resource input failures (bd3a9bb)
• native: classify pre-aborted analysis first (dfd598f)
• native: coalesce Objective-C class imports by binding identity (4d7de00), closes #5607
• native: compose the selected command cause once (53405fb)
• native: consolidate observed address validation (99a5ffa)
• native: count Objective-C coverage by class object (9dee989), closes #5706
• native: count Swift vtable coverage in slot units (f789fd1), closes #5681
• native: decode little-endian fat headers (bede3e3), closes #592
• native: decode Mach protection bits in their proper positions (#586) (6aba6ae)
• native: decode plist sources within result capacity (cc18e9a)
• native: decode the Objective-C word-alignment sentinel (74afb04), closes #3186
• native: derive Mach-O word size and byte order from the selected slice (#3163) (3f5b703)
• native: distinguish batch selectors from resolved entries (13c3b68)
• native: distinguish batch selectors from resolved entries (bfaa5a6)
• native: distinguish malformed navigation from procedure absence (a732bd0)
• native: distinguish proven pre-launch failure from unknown target ownership (45b6a7f)
• native: distinguish Swift protocol identity from member context (48821e8)
• native: distinguish symbol definitions from metadata (70bad53)
• native: distinguish undecoded Swift spelling adjustments (808339f)
• native: format runtime convention guard (2d426c9)
• native: harden command capture edge cases (c2e64a4)
• native: harden command capture edge cases (d39f98d)
• native: honor Mach-O chained pointer locations and library ordinals (#1709) (3b0ea59)
• native: inspect Apple dispatch metadata in FAT64 binaries (#590) (f3e6582)
• native: inspect arm64e.x1 slices by their exact name (#3500) (2b2a5d0), closes #3389
• native: inspect mixed-signature Mach-O slices (1dccd0d)
• native: inspect mixed-signature Mach-O slices (66f3cfa)
• native: inspect plists containing data, dates, and non-finite reals (bc2cd8b)
• native: inspect plists containing data, dates, and non-finite reals (5ead2cf)
• native: inspect the selected universal Mach-O architecture (#601) (2b7bb3b)
• native: keep a category whose class reference cannot be read (#4093) (fc41b24), closes #4012
• native: keep a dylib's own install name out of its dependencies (#4050) (30ba5e9), closes #3872
• native: keep bounded trace edges and depth consistent (#2758) (f903827)
• native: keep echoed codesign paths out of signature fields (#865) (4aa2b60)
• native: keep echoed Mach-O paths out of load commands and symbols (ab985c6)
• native: keep echoed Mach-O paths out of load commands and symbols (37fe105)
• native: keep export names ending in a carriage return (#3457) (2425493), closes #3390
• native: keep integral plist reals beyond the JSON range as reals (#860) (3b92a2b)
• native: keep lipo path echoes out of FAT records (#2605) (59d33a2)
• native: keep plist XML element types for large numbers (f85056d)
• native: keep property flags unknown for unfinished quoted types (#3825) (b7dcf78), closes #3345
• native: keep the resolved bundle plist and permission failures (418a556)
• native: keep truncated empty class-import scans partial (#6153) (ab2119e), closes #6086
• native: match compound otool keys exactly and badge unknown thread entrypoints (#534) (d40502a)
• native: name numeric Mach-O build-version platforms and tools (#2065) (77e71d5)
• native: name the CLI flag that selects another plist (9b69503)
• native: name the ownership helper prerequisite in command failures (#2506) (20f51d7)
• native: name the plist selection that works when Info.plist is missing (5612496)
• native: name the plist selection that works when Info.plist is missing (a6fdf42)
• native: name the retained pwntools process group in cleanup resources (#2281) (4303dcd), closes #2274
• native: narrow capability refusal before retaining its reason (0211b65)
• native: normalize otool line endings and strip plist JSON BOM (#533) (3e4d4d9)
• native: own call preflight hashing through client close (69e670d), closes #4740
• native: own complete metadata mappings and ambiguity (8b3902d), closes #6831 #6830
• native: own contiguous image span mapping across consumers (f461146)
• native: own matching source validation and admission (6b7aa12)
• native: page every retained function dossier collection (#1507) (911323c)
• native: parse renamed dyld_info re-exports (#2364) (1d5f95d)
• native: pass Swift symbols to swift-demangle as operands (dd90965)
• native: pass Swift symbols to swift-demangle as operands (6c88094)
• native: preserve bounded JVM identity before FAT admission (6843dbe)
• native: preserve bridge failure types during cleanup (1d0baa3)
• native: preserve compact reference provenance (#1438) (24d9337)
• native: preserve endpoint context in function comparisons (edf7b3d)
• native: preserve incomplete native UI captures (#991) (9f496ef)
• native: preserve leading U+FEFF in Apple metadata names (#4730) (68c3c5b)
• native: preserve literal environment map members (b413332)
• native: preserve literal line breaks in signing identifiers (#2107) (ec3db37)
• native: preserve LLDB discovery failure classifications (301993d)
• native: preserve Mach-O container framing across inspection (cf3288d)
• native: preserve Mach-O install-name whitespace (#4979) (8b478d0)
• native: preserve Mach-O names equal to version (4852c83), closes #5680
• native: preserve Mach-O operand boundaries and integer limits (fb51960)
• native: preserve metadata uncertainty in coverage (8b57dc6)
• native: preserve mixed-slice signature observations (#5765) (89b1941)
• native: preserve negative Mach-O admission identity (c20b707)
• native: preserve observed function dossier coverage (b1b0211)
• native: preserve parsed section and architecture facts (231e458), closes #5982 #3397
• native: preserve partial call reference evidence (a80575c), closes #5130
• native: preserve physical plist path selection (5f2a06f)
• native: preserve plist admission through finalization (ba6cec3)
• native: preserve procedure selector coordinate intent (5ecd7de)
• native: preserve provider limitations through call traces (a004061)
• native: preserve qualified feature trace observations (676d29f)
• native: preserve qualified Swift protocol identities (aa9043f)
• native: preserve resolved plist selection intent (e6c4877)
• native: preserve seed analysis failures in value traces (e1d9ebd)
• native: preserve selected paths and binding identities (76500f1)
• native: preserve slice identity when selecting UUID rows (2f6b9ec)
• native: preserve Swift pointer nullability and import bindings (d0067ba), closes #5683 #5685
• native: preserve text-valued load command metadata (#520) (bcfb407)
• native: preserve UI scalar facts and selection failures (cc90771)
• native: preserve universal Mach-O container identity (b38429c)
• native: preserve unknown ELF export coverage without a dynsym section (9fd78a7)
• native: preserve unknown Objective-C metadata (b112d44)
• native: preserve unknown provider symbol addresses (8116dc0), closes #4542
• native: preserve unknown Swift extension contexts (84f4eb4)
• native: preserve unresolved calls in untyped route fallback (#2757) (48b90fb)
• native: preserve whitespace in Mach-O segment and section names (#6842) (af3b039), closes #6818
• native: project decoded entitlement scalars through plist owners (69324b0)
• native: raise default PE resource entry budget to 16384 (#1703) (951c2aa)
• native: rank Mach-O slices by parsed CPU subtype (c02fb0e)
• native: record an empty Objective-C protocol name as a protocol failure (#4078) (41e4c06)
• native: recover macOS command deadlines (#6059) (ae09e3f)
• native: recover malformed Objective-C names at decode boundaries (a70c42e)
• native: refuse inspect_signature on non-Mach-O targets (#2262) (5eb2966)
• native: refuse to list architectures of non-Mach-O targets (#1325) (1b73b5a)
• native: refuse truncated executable headers at target admission (d39a450)
• native: refuse truncated executable headers at target admission (0b04d38), closes #1189
• native: reject ambiguous otool load-command framing (108b5f9)
• native: reject empty Swift class vtable owner before slot insertion (#4469) (3d44176)
• native: reject required otool fields truncated before their value (#1995) (adde8a8)
• native: reject signal-terminated command captures (#608) (b81d18e)
• native: reject trailing text in lipo integers and keep multi-word otool keys (#531) (9e30d93)
• native: remove completed signing capture limitation (#5548) (f6e4e02)
• native: report absent launch process before cleanup classification (a2d0af6)
• native: report an object file's unnamed segment by its empty name (#4051) (65726af), closes #3875
• native: report exact plist integers beyond the JSON number range (c9f49db)
• native: report exact plist integers beyond the JSON number range (430c297)
• native: report PE input byte budgets as file-size limits (#4290) (467f557)
• native: report PE resource subject architecture (926e18b), closes #4800
• native: report plist permission denials as access failures (5738a0c)
• native: report plist symlink loops and overlong paths as selection failures (#6371) (f290b27)
• native: report record-local Objective-C budget omissions (9eec57b)
• native: report unidentified text plists as unknown (#4320) (4e14452)
• native: report why a selected plist cannot be inspected (14f9b3d)
• native: report why a selected plist cannot be inspected (0674fac)
• native: require canonical dispatch inventory rows (06822ae)
• native: require observed symbol origin for named identity (62f7b5e)
• native: resample tool identity for each invocation (14b19a0)
• native: resolve inspect_plist defaults from the selected target's bundle (#3774) (084e540)
• native: retain Apple dispatch metadata descriptor cleanup ownership (#4745) (95b561f)
• native: retain bounded plutil refusal diagnostics (7ca7e38)
• native: retain completed LLDB facts across output-close cancellation (ef64631)
• native: retain decoded zero-address Swift class references (#6069) (f5acf82)
• native: retain every repeated otool load-command field (#4048) (47b4628), closes #4008
• native: retain failed command cleanup owners (d9b4ae1)
• native: retain failed pwntools process and runtime cleanup (#1708) (11fe5a1)
• native: retain lazy dylibs, normalize version-min builds, limit thread entrypoints (#532) (0f77ada)
• native: retain LLDB cleanup ownership through client close (7ad353f)
• native: retain LLDB evidence prefixes after read failures (eb2c3b5), closes #5058
• native: retain LLDB readback ownership through cleanup (0f7fd00), closes #4742
• native: retain Mach-O architecture discriminant narrowing (a03096c)
• native: retain Mach-O facts when dyld rejects missing UUID (2b263a7), closes #5606
• native: retain Objective-C implementation alternatives (7fd722e)
• native: retain owned preparation failures through command adapters (0f61261)
• native: retain partial call routes and omitted sites (6588435), closes #5073 #3922 #5128
• native: retain partial format facts and explicit coverage (55dd21a)
• native: retain plist descriptor cleanup ownership (e09a503), closes #4723
• native: retain processor, hidden-slice and property type facts (d441544), closes #6806 #6799 #6801
• native: retain re-exported Mach-O library dependencies (#516) (4a5673e)
• native: retain search row qualifications in feature traces (7784fdb)
• native: retain signature facts through finalization cancellation (715c9c8), closes #4735
• native: retain signature roots until descriptor cleanup completes (9e259f8), closes #5052
• native: retain signature snapshot cleanup ownership (ebc22d9)
• native: retain spaced symbols in dyld inventory (#669) (fa02df9)
• native: retain UI interruption source through final cleanup (36d156f), closes #5056
• native: retain UI outcomes through finalization (d909919), closes #4227
• native: retain unclassified accepted Swift manglings (9d00d7d)
• native: retain unknown UI executable identity (a51a922)
• native: retain valid Objective-C properties beside a malformed record (#3833) (f09f454)
• native: scan byte-pattern inputs without regexp stack growth (255d906), closes #5257
• native: select concrete arm64e Mach-O slices (f04445c)
• native: select concrete arm64e Mach-O slices (fd3282a)
• native: select one slice when universal Mach-O slices share a CPU type (#2040) (96fc84f)
• native: separate container facts from Go metadata admission (c19c2d6), closes #3398
• native: share command supervision and retain failure output (f2e9c49)
• native: share exact Objective-C class symbol interpretation (782c6c6)
• native: share exact-name xref ambiguity resolution (c313f33)
• native: share Swift context and preserve partial protocol facts (2e31d13)
• native: share Swift mangling recognition across metadata (17e3cf9)
• native: supervise LLDB and preserve bounded capture uncertainty (915855e)
• native: unify legacy Mach-O platform interpretation (2b8e388)
• native: unify LLDB discovery preparation failures (6e40f9f)
• native: validate LLDB readback encoding before reporting facts (7201e8a), closes #5055
• native: validate Mach-O command framing before admission (5796220)
• native: validate matching observation context at selection (cebd46d)
• native: validate NativeAOT PE virtual ownership (3fc0075), closes #4763
• native: validate thin Mach-O CPU identity before decoding (cef6414)
• native: validate XML plist source admission (9f5dd56)
• native: verify signature snapshots and frame unsigned diagnostics (eb7acc7), closes #5636
• native: wrap bind address advances to 64 bits (576b58c)
• navigation: reject malformed containing-procedure results (b7ebccf)
• network: count omitted response content promptly (#6413) (c8d58d2)
• normalize retained terminal observations with sampled identities (20ff689)
• npm: preserve explicit setup versions (#465) (1783bf6)
• npm: use latest entry points without install scripts (34252f5)
• npm: use latest entry points, remove install scripts, and rename skill (bf85ee6)
• objc: isolate empty protocol selectors and category class names (#4549) (d5be402)
• objc: validate direct protocol enumeration input (#4405) (414ad52)
• objdump: preserve input issues and provider launch failures (76381b2)
• objdump: scope debug-link limitations to DWARF requests (c284168)
• observation: keep incomplete cancellation observations (#5644) (de4579e)
• onboarding: isolate client homes and clarify npm release support (#1627) (b74d9a1)
• opencode: override inherited disabled flags (#3469) (c592ea6), closes #3318
• order remaining outputs independently of host locale (#1867) (e4ac7bb)
• package-verifier: reject overview responses without a procedure count (#2936) (4758ba3)
• package: accept expected doctor diagnostics (0f2d013)
• package: parse tar listings without platform line endings (#4315) (5b08d04), closes #4128
• package: separate agent and Hopper setup support (#584) (205a977)
• packaging: distinguish tar line endings from filename bytes (306d531), closes #4154
• parsers: correct Rust import and PTX alignment control (f09dde0)
• parsers: preserve format boundaries and query occurrence identity (5f702dd), closes #6709 #6688 #6719 #6718 #6704 #6703 #6692 #6723 #6687 #6726 #6696 #6691 #6727
• parsers: preserve format evidence and caller input identity (bd4f5e9), closes #6733 #6741 #6722 #6732 #6736 #6734 #6764 #6766 #6739
• parsers: respect container facts and real decoding boundaries (6ba6aea), closes #6751 #6763 #6754 #6767 #6762 #6779
• parsers: retain independent facts and boundary identity (99d2d7a), closes #6738 #6737 #6745 #6740 #6749 #6747 #6739
• paths: honor physical caller selection and refuse extraction overlap (5e8f8b3)
• paths: select caller paths through symlinks and .. as the filesystem does (#4067) (fc791bb)
• pcap: locate parent validation issues within analysis-view source (#6195) (25a0f3c)
• pcap: name the host tool to configure in capability refusals (#2507) (bb96afd)
• pcap: order evidence ties by code point instead of host locale (#2509) (f6556ad)
• pcap: preserve cancellation and endpoint evidence through cleanup (419502c)
• pcap: preserve completed Evidence on late cancellation (304c978)
• pcap: preserve exact UTC capture instants (796faa0)
• pcap: preserve frames with empty protocol stacks (#5762) (bbbd208)
• pcap: preserve header snapshot limit with inferred lengths (7958e15)
• pcap: preserve HTTP/2 URI and selected-tool admission facts (4cb1f1d)
• pcap: report workspace allocation failures by their system cause (#6229) (b4f9f0d)
• pcap: retain absolute HTTP request targets (1ece963), closes #6537
• pcap: retain independent probe cleanup owners (c245515)
• pcap: retain parsed observations when process cleanup fails (23c70d6)
• pcap: retain timestamps from supported Wireshark 4.x labels (95957d7)
• pcap: retain UTF-8 decoding failures across tool output (51e5938), closes #6775
• pcap: share capture host admission with discovery (ad629b2)
• pe: accept BER indefinite CMS values (5532624), closes #6574
• pe: accept WIN_CERTIFICATE padding counted in dwLength (#6721) (ba9c5bc)
• pe: distinguish unsupported overlapping header layouts (d9d7772)
• pe: ignore unused export ordinal slots (379f373), closes #6577
• pe: ignore zero-extent sections in resource interval ownership (#4463) (9e7e13f), closes #4455 #4373
• pe: inspect resource records at their declared offsets (22d5a40), closes #5750
• pe: preserve biased export ordinals (73d85f6)
• pe: preserve resource directory paths and source ranges (15190ff), closes #6872
• pe: reject unsupported certificate name encodings (055d1a9)
• pe: retain empty resources at virtual section endpoints (045c84d), closes #3970
• pe: retain resource directory branch identities (66671e8)
• permission: defer cache write grants (6a3fd5b)
• permission: defer cache write grants (f840e70)
• pe: separate certificate content from counted alignment (03077d5)
• pe: share header identity across native metadata readers (abf7d30)
• platform: accept absolute paths for any host and stop blaming the ceiling for a missing grant (#552) (e793e12)
• plist: decode formatted XML dictionary keys (f1924cf)
• plist: decode formatted XML dictionary keys (#1843) (928b4d5)
• plist: disclose binary prototype-key omissions (8d3cfef)
• plist: ignore inherited XML entity lookup properties (#4530) (abe4980)
• plist: ignore processing instructions between container members (fd728f2), closes #4964
• plist: keep character references beyond Unicode literal (5afd8a8)
• plist: keep negative-zero reals distinct from positive zero (#4839) (3b5605e), closes #4834
• plist: own XML values and numeric facts in one decoder (7aa4b98), closes #3373 #4042 #4789
• plist: preserve complete XML dictionary key identities (78cf610), closes #3371
• plist: preserve observed non-finite XML reals (6c98708)
• plist: preserve source semantics in XML data decoding (cee95b2), closes #4978
• plist: preserve Unicode separators during XML normalization (00266ef), closes #5702
• plist: preserve unknown XML scalar identities (3537e58), closes #4852
• plist: read XML plists containing a proto key (faaee69)
• plist: read XML plists containing a proto key (a08be51)
• plist: recognize OpenStep files with leading comments (#6394) (37cbeff)
• plist: reject malformed XML before value decoding (c7e9e09), closes #4714
• plist: reject XML dictionary keys without values (869d2bc), closes #6682
• plist: report omitted proto entries in signatures and Interface Builder (15ab5db)
• plist: report omitted proto entries in signatures and Interface Builder (6729ee7)
• plist: retain known binary non-finite value identity (f2b7bbb)
• preserve actionable artifact diagnostics (#119) (7385220)
• preserve mixed Swift demangler record outcomes (93de7bc)
• preserve native UI failure reasons and dedupe version literals (#854) (2d4a910)
• preserve optional unknown filters (db1efef)
• preserve process filesystem scope and admission failures (2f6e050)
• preserve process identities in pwntools cleanup errors (#2284) (d853744)
• preserve requested evidence paths on macOS (0c0e2b8)
• preserve requested evidence paths on macOS (3d0ad79)
• preserve selected Electron display authorization (6aae8ef)
• preserve setup diagnostics and clean Knip config (2d1e021)
• preserve setup diagnostics and clean Knip config (5a7ccef)
• preserve unknown historical module resolution (857a75b), closes #6679 #6678 #6612
• preserve unknown JSON omission counts (#5905) (c717c8a)
• process: accept a trace identifier the comparison result can represent (#2488) (2c6a4fa)
• process: add an opt-in Swift module cache (#2252) (47a51b0)
• process: aggregate incomplete trace-spec diagnostics (857a1b7)
• process: align capture Evidence provider admission (713db4d)
• process: align provider detach with configured platform (3fff74f)
• process: apply one timeout rule to both execFileOutput modes (3d32819)
• process: attribute finite trace omissions and cleanup states (fc7e41f)
• process: attribute trace omissions without changing shared successors (2544397)
• process: avoid cold ownership helper deadline exhaustion (#1139) (65a809a)
• process: await cleanup on CLI and MCP cancellation (f6fe575)
• process: await owned observation commands through finalization (ca71e91), closes #5199 #5202
• process: bound normalized terminal retention before allocation (1d826f3), closes #3168
• process: bound retained trace ordering state (63e796d)
• process: bound terminal buffers before capture (f9ea9a9)
• process: bound trace comparison semantics (b4df565)
• process: cancel run-token reads during sampling (09b6828)
• process: capture complete host probe output (6c68ff5)
• process: capture MCP process scenarios with the server environment (#6173) (6da3839)
• process: centralize capture evidence admission (9eb829a)
• process: clarify Windows capture support and recovery (#798) (50787b2)
• process: coalesce delayed capture progress (6cd5ea0)
• process: default capture networking to loopback (bce3398)
• process: derive executable names from the capture host (#1108) (34cc925)
• process: expose Darwin swiftc compile deadline via env (#2240) (e4186af)
• process: expose launcher identity mismatch (62ac73c)
• process: gate launch and retain cancellation provenance (d6ca7b3), closes #4512 #5142
• process: gate sampling on initialized PTY root (57938a8)
• process: gate sampling on initialized PTY roots (e831a41)
• process: harden capture validation and cleanup (ac78de0)
• process: harden filesystem snapshot identity and cancellation (#956) (93aa9eb)
• process: honor disabled PID normalization in samples (44b3627)
• process: honor disabled PID normalization in samples (a4e5736)
• process: honor startup deadlines and add a CI audit skill (#2692) (21aa877)
• process: identify unknown live processes in cleanup diagnostics (eb89a16)
• process: index late scenario events in validation issues (#6160) (cbbd317)
• process: keep capture evidence when an admitted root's ancestor changes (#6264) (b6007e0), closes #6213
• process: keep lifecycle waits independent of application timers (5199c67), closes #5267
• process: keep network approval fail-closed (9526389)
• process: keep observed symlink targets in filesystem snapshots (#3418) (7a83af3), closes #3303
• process: keep ports before a chunk-final period (184ed97)
• process: keep provider deadlines independent of wall-clock changes (#2311) (72d5bbc)
• process: keep structural capture issues alongside semantic ones (#6020) (dc53c11), closes #5957
• process: keep unobserved file contents unknown (#1358) (f91f279)
• process: keep validation detail internal (614a119)
• process: localize capture truncation diagnostics (#1284) (33bf585)
• process: name the pattern field in default invalid-regex errors (#6270) (690a63a)
• process: name the reason two captures cannot be compared (#1080) (eb69763)
• process: name the Swift compile deadline (#6071) (d8a9673), closes #5910
• process: normalize macOS launcher identity (9c3aec8)
• process: normalize ports that end a sentence (098d769)
• process: normalize ports that end a sentence (db98a51)
• process: normalize resize frame timestamps (74d1c7b)
• process: normalize resize frame timestamps (77696df)
• process: normalize scenario replacements literally (f51503e)
• process: observe already-due trailing callbacks before settling the capture journal (#1700) (ed084b3), closes #1697
• process: order interaction differences by their dispatch time (#2739) (ce748be)
• process: own bounded worker control framing (34563fc)
• process: parse native teardown relation sentinels (6c4d880)
• process: preserve artifact cancellation through finalization (147ae97)
• process: preserve caller overrides during Windows environment normalization (1bbf4bd)
• process: preserve caller-selected working directory in scenario validation errors (#7003) (7e57b8c)
• process: preserve cancellation through liveness rechecks (3927542), closes #5205
• process: preserve cleanup ownership and normalize captures once (599a8ee)
• process: preserve cleanup ownership through retries and close (974487f), closes #5144 #5163 #5166
• process: preserve completed observations and cleanup authority (e567033)
• process: preserve discovery ownership across cleanup retries (#2643) (9958754)
• process: preserve file outcomes through exact cleanup recovery (3fcba07)
• process: preserve invalid runtime path selections as input errors (cecc6ec)
• process: preserve monotonic capture timing and observed wall dates (9049dba)
• process: preserve nested path identities during normalization (#2468) (b9ee921)
• process: preserve nonconforming differences (f1cc485)
• process: preserve numeric output and original PTY evidence (c5c75c3)
• process: preserve numeric output and original PTY evidence (00d8e44)
• process: preserve observation-root failures and omitted symlinks (a8609d5), closes #6446 #6444
• process: preserve observations after successful cleanup (2af12a1)
• process: preserve observed command failures and native ownership (e367750)
• process: preserve owning operation cancellation (50dbd87)
• process: preserve partial evidence and verify detached cleanup (#1011) (63cf28f)
• process: preserve partial sampling observations and shutdown gaps (ba866a2), closes #5081 #5194
• process: preserve replay event causality (d895e49)
• process: preserve sibling path identities (c74bc21), closes #6586
• process: preserve terminal cell widths during normalization (#4142) (1ba178b)
• process: preserve the caller abort reason in regex worker cancellations (#6959) (689f738)
• process: preserve unknown filesystem absence in partial captures (c8544b1)
• process: preserve unrelated trace comparison uncertainty (#4178) (7b86d5c), closes #3931
• process: propagate comparison contradictions (#6298) (77c72b9)
• process: protect unrelated Hopper during cleanup (81539c4)
• process: protect unrelated Hopper during cleanup (e4ee4c9)
• process: quiesce terminal producers before final observation (b6e107a), closes #6443
• process: reconcile native lifetime and selective Linux UID facts (4af71a4)
• process: record no normal exit code for signal-terminated targets (#6486) (4cfc611), closes #6445
• process: record withheld unrelated Linux processes as unverified (#6220) (26356dc)
• process: refuse malformed timeouts for stoppable commands (136d4aa)
• process: refuse malformed timeouts for stoppable commands (59c91c8)
• process: reject deep trace cycles without recursive expansion (10935b7)
• process: reject finite trace variants that only reorder unordered members (#6006) (4423b6f), closes #5916
• process: release handles and close worker on incomplete cleanup (#2321) (1e38a03)
• process: release terminals after observation failures (c916850)
• process: report no remaining time after a provider deadline fires (#2720) (ae9a7f3)
• process: report single empty settlement observation as unverifiable (#2232) (7724edb)
• process: report the effective regex heap and uncertain signal retry (#6099) (8413ec0)
• process: report the Swift compiler outcome with bounded diagnostics (#1999) (091cb81)
• process: require current captures and preserve cleanup failures (2a77469)
• process: require observed environment ownership tokens (a68cfd7)
• process: resolve POSIX backslash basenames through PATH (#2471) (03ab521)
• process: restrict cleanup to captured group leaders (40c6f60)
• process: retain capture resources and bound filesystem snapshots (d438675)
• process: retain child scope and bound native exit waits (#5280) (71ae02c)
• process: retain CLI input owners through final cleanup (4f6166e)
• process: retain deletions after observed roots become obstructed (e67c364)
• process: retain diagnostics through bounded output finalization (7016951), closes #4840
• process: retain kernel limit descriptor cleanup ownership (2183c95), closes #4926
• process: retain known events from incomplete captures (5eb0049)
• process: retain native ownership evidence through cleanup (49e67aa), closes #5238
• process: retain owned command cancellation provenance (4087048), closes #4638
• process: retain owned command cleanup diagnostics (#1907) (38539a2), closes #1856
• process: retain ownership after incomplete cleanup (e2fc249)
• process: retain partial filesystem snapshot observations (c85b44e)
• process: retain per-file digest open failures (415145d)
• process: retain provider output until streams close (#928) (b929251)
• process: retain selected freshness requirement in comparison Evidence parameters (#4065) (e0e8b30), closes #4000
• process: retain snapshot handles and partial read outcomes (9af0b61)
• process: retain unresolved descendants during lineage observation (#5270) (b2048d4)
• process: return private runtime ownership at allocation (c22111e)
• process: scope comparison unknowns to their evidence (#732) (9dd6cef)
• process: settle exited zombie groups (072ce5a)
• process: settle exited zombie groups (4828326)
• process: settle launcher exit without dropping descendant lineage (80896a1)
• process: settle native exit and repair ownership verification (#5249) (1c2c2f1)
• process: settle owned cleanup with the launcher's own exit proof (#6205) (aa7d960)
• process: stabilize and speed up the test suite (a3b7de9)
• process: stabilize native capture and ownership prerequisites (2b27515)
• process: stop cancelled Swift helper builds before removing their files (cf41561)
• process: stop cancelled Swift helper builds before removing their files (c717204), closes #1173
• process: stop failing captures on tokens macOS cannot expose (#1057) (5547c1e)
• process: stop timed-out commands with the caller's stop signal (4b38d18)
• process: stop timed-out commands with the caller's stop signal (063de50)
• process: token-check identityless exit-refresh replacements (#5675) (df8b4d8)
• process: tolerate exit during ownership revalidation (a0f8b72)
• process: treat non-ASCII letters as port continuations (ad813e4)
• process: use monotonic time for provider execution budgets (d9e9fb2)
• process: validate rendered omission causes in saved captures (7eaa792)
• process: validate terminal byte totals against retained frames (69833fb)
• process: validate terminal byte totals against retained frames (39eb058)
• process: version literal scenario replacement semantics (2b6f14f)
• progress: measure delivery intervals with a monotonic clock (ed881c6)
• prompts: describe crash document without provider assumptions (ee12d51)
• prompts: keep process capture preparation nonexecuting (4fb936f)
• prompts: suggest only admitted process capture evidence (7cec547)
• protobuf: exclude trailing whitespace from gRPC-web trailer values (#7069) (06a4c33)
• protobuf: own descriptor file identity before registry admission (a8fc330)
• protobuf: preserve MIME admission and transport facts (0b1af48), closes #6836
• protobuf: preserve partial facts for malformed web trailers (9cf7a7c)
• protobuf: preserve wire grammar and schema admission facts (b3c3b21)
• protobuf: reject ambiguous descriptor identities (3e3c9ea), closes #6834
• protocols: honor runtime queue and Frida identity types (5f3b925)
• protocols: make admission and certificate success types exact (39f362d)
• providers: bound launcher diagnostics without losing byte counts (ba056e0)
• providers: name JEB, IDA, and one-shot command deadlines (#6014) (dbd5560)
• providers: offer only admitted ambiguity choices (cec8f1e)
• providers: own deferred client acquisition through final cleanup (fb146bf)
• providers: own profile selection through finalization (f26973a), closes #4569
• providers: own shared startup and retained cleanup (ca7ee01)
• providers: preserve artifact producer cancellation facts (8a247fc), closes #4858
• providers: preserve bounded artifact reads and cleanup owners (effb71f)
• providers: preserve live cleanup ownership through retries (964decd)
• providers: preserve observations and primary cleanup failures (0696bde)
• providers: preserve readiness, coverage, and diagnostic ownership (d4bd65c)
• providers: preserve unknown segment extents and initialized IDA readiness (36db19c)
• providers: report provider-selection diagnostics when the selected provider refuses its profile (#4103) (02e2c9c)
• providers: retain composite cleanup failures and probe child liveness (31b9930)
• providers: retain native parsing and compiler failure diagnostics (b5ededd)
• providers: retain physical refusal and diagnostic facts (171b33b)
• providers: retain worker cleanup owners through shutdown (d1235fa)
• providers: share selected-file error classification (a32d731)
• providers: validate ELF versions and preserve probe cancellation (8b01e0c)
• ptx: normalize parameter declarators once (74c2300), closes #6606
• publication: retain cleanup owners across export workflows (be75ed5)
• pwndbg: clarify debugger context output limit message (98edca9)
• pwndbg: prevent core-triggered executable discovery (5bf4fff), closes #4914
• pwndbg: reject core mapping paths that escape sysroot (b33c0df), closes #4942
• pwndbg: separate the words in the debugger-context limit message (#5372) (0747689)
• pwntools: let callers widen the artifact input bound (#2486) (c44d17f)
• pwntools: preserve actionable provider admission errors (5b3400d), closes #3087
• pwntools: preserve producer cancellation outcomes (08fbeb8), closes #4945
• pwntools: preserve worker ownership across launcher exec (781d575)
• pwntools: retain exact cleanup owners through finalization (1f23e97), closes #4945
• pyinstaller: attribute malformed TOC rows at their owner (8425c36)
• pyinstaller: decode interned unicode names (c4a5910), closes #6676
• pyinstaller: preserve namespace declarations (45a411e), closes #6539
• pyinstaller: report changed admission as integrity (#6325) (49bb6c8)
• pyinstaller: retain colliding archive observations (5bcf71c), closes #6674
• pyinstaller: retain executable member metadata (045c7dd), closes #6702
• python: align pyc and PYZ marshal decoding (fa56001), closes #6560 #6559
• python: classify historical headers and signed flags (81de82a)
• python: compare code objects without inline caches (3784a8e), closes #6597
• python: honor version-specific code equality (60981e0), closes #6547
• python: normalize legacy code flags for equality (aee249b)
• python: preserve code-name identity (f921cb9), closes #6593
• python: preserve historical signed code fields (c6ab965), closes #6487
• python: preserve marshal names and packaged bytecode (f8f52f2), closes #6800 #6789
• python: preserve marshal scalar identity and decode limits (0603223)
• python: preserve pyc file outcomes and cancelled Evidence (8761d42)
• python: preserve signed code-object line numbers (b58aa63), closes #6490
• python: preserve source boundaries in pyc previews (#6492) (1081008), closes #6476
• python: read legacy TYPE_INT64 marshal values (d0a8e3c), closes #6609
• python: reject code keys and set members with unhashable consts (#6424) (cc99d89)
• qlog: list a hidden stream's records without spreading call arguments (#2860) (39f96d7)
• qlog: mark records with unknown STREAM FIN incomplete (4524bbd), closes #6598
• readiness: account for every retained outcome and closure identity (f5b1113)
• readiness: deduplicate stage-level missing-evidence findings (#2203) (df04f99)
• readiness: reconcile closure identities and outcome variants (85b8624), closes #6893 #6894
• readiness: validate stage evidence references once (02cedc3)
• recheck attached worker policy after final artifacts (0729aba)
• recognize aliased createRequire bindings (6cb0684), closes #6612 #6678
• reconstruction: accept function comparison source parameters (c3bc38b)
• reconstruction: accept function comparison source parameters (7a96391)
• reconstruction: authenticate obligation proof boundaries (7b1e3bd)
• reconstruction: bind proof evidence to claims (83b3368)
• reconstruction: bind proof to owner and obligation revision (f8b65e7)
• reconstruction: classify residual graph failures as invalid input (#6321) (b9ca37b)
• reconstruction: evaluate one effective completion scope (a35b933)
• reconstruction: fall back to a kind-based title for blank graph labels (#6137) (f23066f), closes #6126
• reconstruction: include constituent unknowns in overall function claims (7b77db7)
• reconstruction: keep complete contradictions beside incomplete entries (#6009) (2319166), closes #5925
• reconstruction: merge repeated observations into one generated obligation (#3524) (0f966e2), closes #3375
• reconstruction: own coverage validation and reuse parsed facts (1d5357a)
• reconstruction: preserve residual replay uncertainty (153017d)
• reconstruction: qualify original process evidence at its owner (a5de93a)
• reconstruction: reject contradictory function comparison status (#2798) (173da75)
• reconstruction: require comparable cited Evidence for coverage (1b8a9c8), closes #3357
• reconstruction: resolve latest verifier observations without input-order bias (1f7f808)
• reconstruction: retain scoped unknowns in overall claims (d13a036), closes #6879
• reconstruction: retain semantic unknowns in obligation ledgers (#3826) (5d37624)
• reconstruction: share artifact inspection source validation (ee25081)
• reconstruction: share authenticated obligation ledger sources (db2a317)
• reconstruction: summarize obligation ledgers by cited Evidence authority (#5875) (25e1a24), closes #5838
• reconstruction: validate all retained case Evidence references (50af8de), closes #6770
• reconstruction: withhold readiness for manifest references to absent Evidence (#3526) (c976408), closes #3363
• recovery: retain file outcomes and cleanup ownership (0473a30)
• reference-imports: retain exact dynamic import targets (16e64d5), closes #6654
• reference-imports: retain exported import-equals dependencies (9200ade), closes #6655
• reference-source: preserve raw POSIX filename identity (8f9b2ab), closes #6653
• reference-source: recognize Kotlin files in imported inventories (03ffb2c)
• reference-source: respect require bindings (f998fcb)
• reference: apply package main to directory requests (baf1678)
• reference: bind Git metadata joins to physical directories (5c16a85)
• reference: bound Dockerfile language detection (132a3a4)
• reference: bound Dockerfile language detection (53fa559)
• reference: classify test suffixes before extensions (e828acc)
• reference: classify test suffixes before extensions (8b228ae)
• reference: consume Babel 8 import-type source field (97e1b93)
• reference: distinguish computed require member names (ba35b55)
• reference: distinguish computed require member names (df6e476)
• reference: distinguish root access failures from invalid input (3967cfa)
• reference: join internal symlink targets with the inventory NFC normalizer (#1535) (0363e5a)
• reference: keep unresolved root and Git directory reads as failures (1ddb329)
• reference: match exclusions against observed entry kinds (6636045)
• reference: never resolve a directory to an extensionless index (#3789) (3ded799), closes #3381
• reference: preserve directory intent when resolving source imports (#2770) (68ecdcd)
• reference: preserve distinct parse failures (e02cb2f)
• reference: preserve distinct parse failures (543510f)
• reference: preserve exact paths and unify symlink lookup (2ca3ad2)
• reference: preserve exclusion rule provenance (6585293)
• reference: preserve historical backslash import bases (5940600)
• reference: preserve missing symlink target facts (0f4c484)
• reference: preserve module syntax and loader request identity (f2e5fd1)
• reference: preserve observed directories and unreadable links (d6e4fe4)
• reference: preserve raw symlink target identity (7ba0521), closes #6765
• reference: preserve source scope and loader authority (d5df7fd), closes #6891 #6882 #6883 #6859
• reference: preserve symlink races and root failure facts (6296fdf)
• reference: preserve unresolved absolute module specifiers (#670) (c8aed47)
• reference: project import failures through the canonical error contract (ddb3987)
• reference: read linked worktree commit provenance (#677) (d565ecd)
• reference: recognize CMake build manifests (#665) (1a24be5)
• reference: reject FIFO replacements without blocking (f1c58cc)
• reference: report entries beyond the path limit as I/O failures (#2716) (679658b)
• reference: report malformed UTF-8 before import parsing (f166a2a)
• reference: report sloppy scripts, PHP, C# and enclosing Git facts (#1770) (7b15762)
• reference: represent unreadable symlink targets explicitly (b7b4333)
• reference: require exact optional JSON diagnostics at the source schema (779242a)
• reference: resolve extensionless CommonJS requires to JSON files (#4164) (0cfced1), closes #3915
• reference: resolve extensionless imports to .mts and .cts files (#4223) (8194695)
• reference: resolve runtime imports from their owning syntax (c0d550b)
• reference: retain dynamic import relationships (a5d2986)
• reference: retain dynamic import relationships (b89de8f)
• reference: retain inventories with empty module specifiers (#3497) (b28f6c0)
• reference: retain optional CommonJS resolver dependencies (f8ff157)
• reference: retain partial imports for unreadable directories (#766) (cffc548)
• reference: retain recovered parser diagnostics (11d0ef2)
• reference: retain recovered parser diagnostics (ed3a7f0)
• reference: retain source and metadata cleanup owners (53e7fad)
• reference: retain unknown kind for unsupported source entries (ada133c), closes #3218
• reference: retain unknown package scope for JavaScript loaders (c3e4c11)
• reference: retain unverified symlink target provenance (25c2222)
• reference: scope ignore rules and honor local Git case policy (1998640)
• reference: select a package main before its directory index (#3844) (034342b)
• reference: separate local filesystem diagnostics from graph commitments (cae0336)
• reference: stop attributing overwritten require members to Node (#3801) (4692bb3)
• reference: verify symlink identity around target reads (3d83135)
• regenerate release product catalog (732d606)
• regenerate release product catalog (f1694c2)
• reject directory paths for the Wakaru limiter and mitmdump (a67dbf6)
• reject PTY environment names the backend cannot preserve (d330588)
• release: allow npm propagation time (2ef02ce)
• release: always bump minor for releases (be783ef)
• release: avoid duplicated contributor thanks (6b043dc)
• release: avoid unused root commit file lookups (8736fe3)
• release: drive checkpoint releases from frozen branches (fc58fa1)
• release: exclude Codex automation from contributor thanks (efe0923)
• release: exclude Copilot from human contribution credits (8e6a957)
• release: extend npm propagation window and improve diagnostics (#943) (06b047a)
• release: install the npm canary before its MCP handshake (0b4fd11)
• release: isolate npm publication from dependency execution (#6681) (5d6b8a0)
• release: let release PR updates trigger CI (#470) (bf04d1a)
• release: publish from explicit source checkpoints (49887f0)
• release: publish from explicit source checkpoints (#1003) (64c7188)
• release: publish from explicit source checkpoints (#1006) (b4fc0ec)
• release: publish prereleases under the next npm tag (bfb7776)
• release: publish reviewed release PR merges (cdddfdd)
• release: publish reviewed release PR merges (c12bad7)
• release: recognize conventional titles in GitHub merge commits (f5009ed)
• release: recover transient commit-history reads (e3a6ce4)
• release: recover verified partial registry publications (790657d)
• release: rehearse qualified packages before publication (6060de3)
• release: restore automatic release proposals on main (acb3e0f)
• release: restore qualified runtime before the npm canary (c99c6a8)
• release: support built-in credentials and refresh release boundary (6a278a6)
• release: support default credentials and record 5.0.0 boundary (#1012) (6a278a6)
• release: sync 5.0.0 checkpoint back to main (966cca8)
• release: tolerate npm registry propagation delay (726b730)
• release: validate frozen checkpoint versions and breaking notes (8a31508)
• release: validate frozen checkpoint versions and breaking notes (60825fb), closes #1063
• remove unused boundary exports (49f1ec1)
• repair boundary contracts across CLI and MCP (#597) (9c25dc4)
• repair main after bulk merge (7091be2)
• repair the static-check failures on the default branch (#2895) (df3d96d)
• replay: keep proto own properties and reject symbol-keyed results (#540) (05bb630)
• replay: link the complete ESM graph before evaluating (#515) (4200a42)
• replay: preserve CommonJS object as ESM default export (#519) (2df6b51)
• replay: preserve Date call and explicit constructor semantics (#512) (9975bd2)
• replay: preserve sparse array positions in result projection (#522) (9d1c363)
• replay: share one seeded generator and present builtins with real identity (#539) (5b51fa0)
• repo: keep dependency links out of version control (#617) (b3223e3)
• report JavaScript worker phases and parent budget recovery (3f9357b)
• report malformed application evidence as input errors (218c131)
• resolve selected require call members (9b59807), closes #6678
• resolve triaged correctness issues (2575b30)
• resolve triaged correctness issues (e8ed307)
• resolve validation and artifact edge cases (2468682)
• resolve validation and artifact edge cases (ef7f2f9)
• resources: inspect app resources without an executable (6a6adf7), closes #5589
• restore caching, preserve failures, and verify fixture claims (#1211) (27a9cea)
• restore JavaScript analysis and current regression checks (#3080) (7ad75bd)
• retain cancellation during Electron handle finalization (4e2a566)
• retain completed historical replies through finalization (661aef5)
• retain completed observations when later analysis steps fail (35f121f)
• retain discriminated Electron action outcomes in projection (44efd92)
• retain Electron file admission facts across adapters (e94d5a5)
• retain Electron window handles through cancelled selection (1707d17)
• retain Frida observations through shared finalization (48f700e)
• retain narrowed terminal observation values (96e1a60)
• retain proven createRequire URL bases (4bad48d), closes #6612 #6678
• retain require.resolve source facts (1a430f0), closes #6678
• retain status observations when session cleanup fails (3712274)
• retain unresolved browser secret declarations as input errors (cbfc2bd)
• reuse validators for identical output schemas (aa7008f)
• reuse validators for identical output schemas (1887e11)
• reverse: reconcile cleanup ownership and mutation diagnostics (#2799) (4aa51bf)
• reverse: retain output loss after successful command exit (e639edf)
• rizin: accept proven inferior exit after detach (#5281) (e84e17e), closes #5277
• rizin: bound recent history frames by UTF-8 byte budget (#5246) (1b3ac94), closes #5091 #5242
• rizin: default one-shot output to plain presentation (#5269) (2dd5eff), closes #4488
• rizin: enforce UTF-8 recent output byte limit (#6314) (e28c11f)
• rizin: keep protocol failures outside exit recovery (#5290) (909b9f7), closes #5282
• rizin: preserve output whitespace before completion markers (d5fc7e6)
• rizin: preserve primary outcomes across final cleanup (cab6527)
• rizin: retain cancellation and recover cleanup correlation (57aa21a)
• rizin: retain interrupted command frames (#4459) (1ff7054)
• rollup batch of fixes (b348b2c)
• runner: scope internal Node notices to the supervisor (#7020) (c94bd27)
• runtime: align remaining Node security pins and setup guidance (#6316) (520f8e8), closes #6480
• runtime: apply permission reloads atomically (49e843e)
• runtime: apply permission reloads atomically (3ae7109)
• runtime: make observed target role optional (593a8e1)
• runtime: preserve deterministic context identity (9bd2ac5)
• runtime: preserve unknown debugger attachment state (e55ef72)
• runtime: require patched Node.js security releases (#6315) (28a33ca), closes #6283 #6480
• runtime: retain complete reconciled graph content (bedd55a)
• runtime: retain Inspector and Electron cleanup ownership (87ab054)
• runtime: serialize permission reloads (7e53dd6)
• runtime: unregister shutdown handlers (71072d8)
• runtime: unregister shutdown handlers (f9e3c23)
• rust: preserve historical cargo-auditable feature facts (9c4dd7e), closes #6622
• rust: preserve JSON field identity and PE stream extents (929a0a7), closes #6814 #6793
• rust: retain compatible cargo-auditable revisions (36c9142)
• rust: retain parsed defaults in cached Evidence views (0294079), closes #6689
• rust: scan read-only ELF load data (d273996), closes #6663
• rust: separate section storage from compressed stream admission (3e7e102)
• satisfy dead-code and generated-doc checks (b15a9ec)
• schema: compose portable stack-safe base64 constraints (0949313)
• screenshot: reject invalid PNG header dimensions (#2472) (e74e4e9)
• screenshot: validate complete PNG IHDR (#6412) (3e85da9)
• scripts, install: honor test:fast "without build" promise and orient Node.js engine mismatches (#2026) (69e097a)
• scripts: keep the first proxy error in the package-update verifier (#6362) (0f09630)
• scripts: pass MCP callTool timeouts as request options (#2387) (c462a4e)
• scripts: remove the ADB verifier's pushed probe file from the device (#5256) (81b94ce)
• search: share Unicode literal matching and preserve field boundaries (3d24683), closes #6785 #6714 #6735 #6750
• security: restrict investigation artifact inputs (a2076b4)
• select Node legacy package entry fields for import and require (#1035) (1706005)
• semantics: isolate named function expression bindings (#776) (ae81f64)
• semantics: preserve direct promise ownership boundaries (#758) (e1ca412)
• semantics: preserve empty string property keys (#764) (630bdaf)
• semantics: recognize Node builtin default namespaces (#769) (24a0bf9)
• semantics: retain trailing rest argument flows (#756) (4bfd803)
• server: mark retained partial-observation errors as target content (#2398) (fc0dbe7)
• server: report 2025-era client identity and features in binary_session (e6abaef)
• server: report 2025-era client identity and features in binary_session (b8312fa), closes #1167
• server: retain session admission through investigation publication (663d07f)
• session: admit direct native dispatch metadata providers (50b6975), closes #5070
• session: align call relationship discovery with traversal modes (1d5bf5f), closes #4687 #5068
• session: attribute selected-provider capabilities to the resolved identity (#2013) (2ff850d), closes #2009
• session: describe native UI trace source routes (32f0e51), closes #5071
• session: invalidate snapshots before metadata write dispatch (1c64fe3)
• session: isolate availability observers (43766fd)
• session: isolate availability observers (e5a80d4)
• session: own selected snapshot read cleanup (13fcf58), closes #6216
• session: own target admission descriptors through finalization (2732d53)
• session: preserve binding commitments during restoration (6f8dc9c)
• session: preserve investigation records after failed target opens (#2754) (af7638f)
• session: reject an unknown configured provider before unbound routing (#2976) (64041e3), closes #2592
• session: reopen replaced targets (e98413c)
• session: reopen replaced targets (5c55999)
• session: report retained file and candidate cleanup (839410b)
• session: require an open target for session-bound native and artifact tools (d8e314c)
• session: require an open target for session-bound native and artifact tools (cf77d07), closes #1166
• session: retain cleanup blockers and snapshot request identity (9becdfe)
• session: retain failed provider cleanup for lifecycle retries (#1260) (24a3aa0)
• session: serialize snapshot lifecycle with admitted requests (e44cb45)
• session: verify retained client liveness on open fast path (e59db2f)
• setup: accept leading BOM in JSON client configs (a5b970c)
• setup: accept leading BOM in JSON client configs (fe843ec)
• setup: accept the pinned Hopper RPM launcher (#933) (dda8e6a)
• setup: admit client policy from the current snapshot (3914e72)
• setup: admit only strict JSON for Claude Code configuration (#4944) (18aa9af), closes #4940
• setup: advertise only providers with passing readiness checks (f5d1012)
• setup: align Node runtime checks with package engines (5802ef8)
• setup: align Node runtime checks with package engines (ea0b733)
• setup: bind recovery to the published configuration file (7e4eed9), closes #4900
• setup: configure a comment-only Hermes config.yaml (#2096) (aa6f74a)
• setup: configure an empty Hermes config.yaml (#1983) (43f9c39)
• setup: configure every detected client (69744a4)
• setup: configure every detected client (24f9a1f)
• setup: deduplicate selected clients before planning (#3919) (c012015)
• setup: derive MCP tool deadlines and preserve caller timeout choices (dadf909)
• setup: distinguish Hopper inspection and archive staging failures (87c5967)
• setup: edit the duplicate JSON member that clients read (#4957) (b83b9ca), closes #4952
• setup: evaluate Gemini workspace trust before settings content (aade9bb)
• setup: follow and validate Hermes sticky profiles (#1528) (86b223b)
• setup: honor active client configuration and skill roots (#1504) (7a56fe6)
• setup: honor config roots and display terminal dry-run plans (2397137)
• setup: ignore empty home directory selections (c339f9e), closes #2325
• setup: include registered IDA budgets in client deadlines (fa31899)
• setup: inspect installed skill identity for unqualified doctor (ba33c70)
• setup: install the skill for Claude Code (b4a1919)
• setup: integrate Windows runner and ConPTY corrections (ebecf06)
• setup: keep a Cordis operation's own fields when uninstall empties it (#2730) (ba06d9e)
• setup: keep client and skill setup when the Hopper install fails (#5120) (c4b7a2e)
• setup: keep Codex TOML comments when adding or removing REA (f5539cf)
• setup: keep Codex TOML comments when adding or removing REA (e9c48a6), closes #1163
• setup: keep comments around REA's table in Grok Build TOML (#6261) (86357ba), closes #6207
• setup: keep Hermes config numbers as written (#2368) (d3a5572)
• setup: keep the CLI-only skill choice offered under a client ID (#6401) (6c1b7f8)
• setup: launch Windows npx registrations through cmd.exe (#1072) (ef30343)
• setup: materialize the pinned package-runner cache before the first client start (#7032) (6a96f4f)
• setup: name each skill directory in the uninstall summary (#2118) (5190843), closes #2111
• setup: name invalid client config shape errors clearly (#2157) (b1bf4a7)
• setup: name structural problems in client configurations (#2154) (51367ca), closes #2152
• setup: offer Hopper installation only where setup can install it (#4642) (3571002)
• setup: omit aligned client configurations from plan (a86da4f)
• setup: omit aligned skill from plan (d81687f)
• setup: omit aligned skill from plan (2984fa7)
• setup: own Hopper replacement staging and committed outcomes (8c0e431)
• setup: persist detected Hopper launcher (b2866e4)
• setup: pin Hopper's macOS publisher identity before install (#2481) (650237e)
• setup: preserve cleanup ownership and resource reports (#6920) (98ec00f)
• setup: preserve client config symlinks (85285f1)
• setup: preserve client config symlinks (df87544)
• setup: preserve client-owned MCP policy on refresh (f5d791f)
• setup: preserve concurrent client configuration edits (#4855) (42e1a17)
• setup: preserve configuration identity and inspection uncertainty (9abdad3)
• setup: preserve configured MCP server environment (#1607) (52331ab)
• setup: preserve consent and startup target kind (a67054f)
• setup: preserve Cordis ownership across uncertain patch structure (21eff3b)
• setup: preserve current recovery snapshots and decoding failures (f6775a3)
• setup: preserve equivalent caller launcher paths (adafef2)
• setup: preserve explicit clients with all-detected selection (#5508) (2204146)
• setup: preserve Hermes YAML scalar semantics (66536d0)
• setup: preserve initial backups and Codex comments (#1204) (6051cb2)
• setup: preserve invalid MCP configuration (88f5edc)
• setup: preserve JSONC trivia when removing registrations (4fd28fc)
• setup: preserve launcher identity and uncertainty (19329e4), closes #4895 #4896
• setup: preserve launcher identity during registration repair (915e56e)
• setup: preserve onboarding after refactor (da48033)
• setup: preserve overridden runner variables and test isolation on Windows (2abfe53)
• setup: preserve owned Gemini user settings (c106cf2)
• setup: preserve recovery backups and retain installer cleanup (a011485)
• setup: preserve registration identity and recovery ownership (ec56c1d)
• setup: preserve rejected registration setting details (de9d52c)
• setup: preserve semantic configuration refusal during uninstall (25d7135)
• setup: preserve skill files and report rollback failures (c240768)
• setup: preserve source keys across configuration boundaries (98ca6c8)
• setup: preserve the selected destination during configuration publication (d0253c9), closes #4904
• setup: preserve unrelated Hermes YAML line formatting (58e91e1)
• setup: preserve validated caller-selected JEB registration settings (b3c5672)
• setup: preserve Windows environment override identity (#4946) (e84468c)
• setup: propagate selected provider deadlines through CLI registrations (333e0ab)
• setup: purge caches from their producing path owners (fc05f68)
• setup: read an OpenCode V2 server named type as a table entry (#866) (4e17be5)
• setup: read signed 64-bit TOML integers losslessly (#4937) (270bc38), closes #4917
• setup: recognize Omarchy as an Arch-based host (#1662) (ad41afa)
• setup: recognize shared CLI launcher aliases (#4803) (c1fe0d6)
• setup: recognize supported Nobara hosts (f0dc233)
• setup: refresh stale local npx bootstrap (6d37efe)
• setup: refresh stale local npx bootstrap (90bb161)
• setup: refuse linked skill installation directories (#3108) (cf6ea09)
• setup: register a stable launcher when run through bunx (#1731) (d412def)
• setup: register OpenCode V2 configurations in mcp.servers (957069d)
• setup: register OpenCode V2 configurations in mcp.servers (69d8afe)
• setup: reject invalid OMP profiles before fallback writes (#1562) (e4cc0f0)
• setup: reject NUL bytes in registration environments (#4335) (5c0fbf4)
• setup: remove emptied skill directories on uninstall (#2182) (d350357)
• setup: replace managed Hopper on reinstall (0ca93f9)
• setup: report the effective ZCode fallback registration (5831667)
• setup: require HTTPS throughout Hopper download redirects (18acae9)
• setup: resolve DeepSeek Harness home overrides (#2461) (1dd6c2d)
• setup: resolve empty Claude profile paths consistently (79e83cb)
• setup: resolve Hermes named-user homes before planning (c555caa), closes #4841
• setup: resolve the configuration MSIX Claude Desktop reads (#2426) (fd65e27)
• setup: retain client configuration cleanup owners (67966c6)
• setup: retain Hermes YAML scalar source during updates (93e75bc)
• setup: retain proven PATH aliases in installed registrations (0326ad9)
• setup: retain publication operation failures and recovery facts (756701d)
• setup: retain regular-file cleanup ownership through workflows (dcfc5d4)
• setup: retain selected skill and maintenance uncertainty (d1fbebb)
• setup: retain skill publication ownership through rollback (211e353)
• setup: retain skill recovery backup cleanup ownership (eba64e9)
• setup: retain symlinked data roots during uninstall (#1821) (7e2f79a)
• setup: retain TOML comments from replaced registration code (4f3d486)
• setup: retain unresolved environment facts when deriving budgets (a718037)
• setup: reuse URL component admission for Hopper releases (60accad)
• setup: select compact input schemas for Kimi registrations (09e7f07)
• setup: separate host support and stop skill checks after drift (#2073) (7dcd23c)
• setup: share effective client dialect and alias bindings (b7eeded)
• setup: stop remaining uninstall removals after a client fails (fd975c7)
• setup: stop uninstall before removals when a client config is unsafe (4fb2f3e)
• setup: stop uninstall before removals when a client config is unsafe (5cc841d), closes #1164
• setup: tell MSIX Claude Desktop's process view from any private roaming file (#4903) (e3a00bb)
• setup: transfer unscoped registration cleanup ownership (8235210), closes #4910
• setup: treat empty APPDATA as unset for VS Code, Trae and Devin (#5126) (273bb66)
• setup: treat empty client config files as new documents (#1117) (9fd65ce)
• setup: treat empty COPILOT_HOME as unset (#5047) (f3537db)
• setup: treat empty DSH_HOME as unset (#2686) (af782dd)
• setup: validate registered MCP output schema profiles (0930e94)
• setup: verify independently selected skill destinations (bb50813)
• share ordered process text normalization rules (c10a360)
• signals: honor selected files and input format options (3b94f2c), closes #6875 #6839
• signals: preserve selected file and format semantics (928ba76)
• signals: reject missing sigrok channels (48cd33a), closes #6631
• signals: reject missing targets and invalid UTF-8 (f6230e2), closes #6671 #6693
• signals: report rejected sigrok selectors as invalid input (#5570) (4dfe346), closes #5515
• signals: report unknown decoder help IDs as invalid input (#5858) (7f9a492), closes #5849
• sigrok: retain recording suffix for autodetection (ea579eb), closes #6580
• skill: disclose retired skill cleanup (4c69e61)
• skill: pin packaged commands to the shipping package version (2793672)
• skill: pin packaged commands to the shipping package version (#1346) (f39e71c)
• skill: remove obsolete grants and audit tool effects (2919def)
• skills: expose authored skill to repository discovery (28d3cb5)
• skills: expose authored skill to repository discovery (696fb83)
• skip unrelated kernel scans during ELF layout inspection (dba4178)
• snapshot: bind replayed subjects to the selected target path (c002b89)
• snapshot: classify non-object roots as invalid content (#2685) (9cf49c7)
• snapshot: count newly retained workflow bindings on import (#4428) (3220e17), closes #4377
• snapshot: decline ambiguous exact evidence replay (#7037) (07eb044)
• snapshot: preserve complete investigation revision histories (#1354) (1c0cc8a)
• snapshot: replay validated workflow evidence (#984) (1d62e54)
• snapshot: report query workflow and Evidence counts separately (04aef6d)
• snapshot: report query workflow and Evidence counts separately (0e77953)
• snapshot: retain MCP workflow replay bindings (5e1afe4)
• source-maps: accept omitted names during browser collection (#2831) (1016c96)
• source-maps: keep sources when sourcesContent length differs (#2873) (3f80b75), closes #2821
• source-maps: preserve failure priority and cancellation provenance (be20ac3)
• source-maps: retain primary failures through cleanup retries (760d9f6)
• source-maps: reuse admitted source URL identities (9066444)
• sourcemap: retain named originals beside unknown source names (83a4445)
• sourcemaps: bind cleanup status to remaining codec owners (d56a25e)
• sourcemaps: preserve nullable source declarations (ee50ed1)
• source: retain CommonJS requires spelled as exact no-substitution templates (#4511) (4842f23)
• sqlite: attribute generated-column evaluation failures to the selection (#5879) (bcfcd8b)
• sqlite: attribute unknown column selections to columns (#2774) (d2e16b2), closes #2613
• sqlite: budget emitted schema names across text encodings (a47788a)
• sqlite: budget schema names by returned JSON text (25aaf89), closes #6888
• sqlite: classify a missing database path as an invalid value (#2775) (4c79127)
• sqlite: distinguish query capacity and unavailable row sources (ef475fc), closes #6855 #6604
• sqlite: honor selected-table reply budgets (#4216) (02a0e72)
• sqlite: keep a retained worker owner after a failed worker exit (#3242) (bdacd41)
• sqlite: keep triggers whose declaration spells the table in another case (#2807) (9407236)
• sqlite: name the selected path in malformed-database errors (#5564) (c1e04bf), closes #5520
• sqlite: preserve catalog byte identity and worker context (6fdcac6), closes #6795 #6607
• sqlite: preserve column identity before row selection (748ac7f), closes #4710
• sqlite: preserve snapshot admission failure semantics (bc51d0e)
• sqlite: report result-column capacity refusals as capacity (#6327) (89fea81)
• sqlite: retain completed worker evidence and unresolved cleanup ownership (b940ad0)
• sqlite: retain primary outcomes through cleanup retries (1006714)
• swift: retain uncertainty for unsupported nested identifiers (90e433d)
• target: confine app program directories to their canonical bundle (5fb6edc)
• target: decode app Info.plist executables with an XML parser (c57f1b7)
• target: decode app Info.plist executables with an XML parser (c182f72)
• target: explain the JavaScript directory analysis route (#733) (8d44b3e)
• target: preserve app bundle filesystem failure reasons (d4c2c3c)
• target: probe WASM before inferred database routing (#2007) (168bfe5)
• target: recognize binary plists by magic under any extension (#2133) (672bdea), closes #2129
• targets: cancel resolution before provider admission (f3c4a33)
• targets: cancel startup and probe PE offsets (66b8d6e)
• targets: compare the Info.plist bplist prefix without ASCII folding (#2100) (7061171)
• targets: keep original DOS header padding out of e_lfanew (#7013) (ab30df0)
• targets: project invalid raw-binary loads as caller input (#2004) (edf4624)
• targets: recognize Windows headers after short DOS stubs (c9fed50)
• targets: remove path advice for format refusals (f28f338), closes #1979 #1852
• targets: retain unsupported PE machine in diagnostics (#2448) (43738be)
• test-fixtures: keep managed metadata and method bodies disjoint (537467a)
• test: adapt mainReload shutdown seam to registerShutdown signature (0a430c1)
• test: audit static Wasm and Harmony tool wording (#1917) (dfe3117)
• test: bound boundary worker pressure (935721d)
• test: disconnect Hopper fixture IPC on SIGTERM (b912b11)
• test: honor boundary ownership and public aliases (92a1c33)
• test: honor Ghidra startup budgets in Windows verification (#3417) (d9cd239)
• test: improve capture reliability and runner cleanup (#609) (d19686a)
• test: make host fixtures portable (f23f529)
• test: match the optional Ajv diagnostics contract (3ae7daa)
• test: preserve Ghidra interior-label controls on Mach-O (#1640) (ac9677b)
• test: reject excluded symlink aliases in exact selection (b782064)
• test: reserve heap headroom for shared CLI workers (#6941) (d662fa5)
• test: retain subprocess coverage and cleanup (7f46bb1)
• test: retain subprocess coverage and cleanup (dae2b9c)
• tests: accept retained module aliases in node views (75e0d62)
• tests: bind HOME in native client and deepseek verifiers (#1638) (7b3011b)
• tests: budget CLI coverage from parsed options (6b18078), closes #4960
• tests: clear lint and typecheck errors on main (6e25cc3)
• tests: complete independent agent evaluation cleanup (0fc8462), closes #5095
• tests: inherit server identity deadline policy (bb212ff), closes #4967
• tests: isolate command finalization module mocks (8cbaf6c), closes #4959
• tests: preserve temporary fixture ownership (093ce69)
• tests: resolve lint plugins in boundary regression (42c16ba)
• tests: restore Android prerequisite verification (23f984b)
• tests: separate Copilot model IDs from wire models (#1647) (b09dd33)
• tests: stabilize process fixtures and malformed input coverage (#6570) (cc8835c), closes #6556 #6480
• test: stabilize boundary timing (f0d8cda)
• tests: verify Qwen skills through an isolated native home (#1646) (9515d2f)
• test: use direct Node launcher on macOS (13f3372)
• test: use eligible bundle targets for UI availability (dcdab56)
• test: use owned cleanup for npm invocation fixtures (5af8fe7)
• test: wait for Hopper reconnect listener readiness (#1885) (d3e83b0)
• tooling: isolate concurrent repository checks (fb17156)
• tooling: isolate concurrent repository checks (ab8c5c1)
• tools: simplify direct invocation and harden boundary contracts (#555) (b5e9891)
• trace: match typed seeds against member arrays (65c8797)
• trace: match typed seeds against member arrays (38ebd54)
• tracing: retain caller reasons at traversal checkpoints (48af28b)
• track require.resolve references (ae013ad), closes #6678
• uninstall: label YAML configuration syntax failures correctly (94153f1)
• uninstall: preflight repeated registration ownership (22ddd82), closes #4976
• uninstall: preserve the configuration as it was before uninstall edits it (c15c206)
• uninstall: remove the REA-owned ZCode fallback registration (#2783) (ff56f78)
• uninstall: retain configuration publication ownership through recovery (2fb5e20), closes #4902
• uninstall: retain per-file partial outcomes (559af3d), closes #5079
• unknowns: distinguish rejected creation from committed mutation delivery (e713c75)
• update: accept npm 12 release metadata (#1138) (567a82f)
• update: bound package-manager output retention (01cdbbd)
• update: preserve disabled client registrations (abf5e24)
• update: resolve Bun global directories before changing cwd (e90acae)
• update: share parsed client activation with maintenance (b045df1)
• upgrade: prevent version downgrades (a204840)
• upgrade: prevent version downgrades (1d1d234)
• validation: retain unmatched union correction details (4d95f2b)
• verification: align Linux Hopper setup lane with current contracts (#1942) (003707f)
• verification: bind Copilot schema profile to observed inputs (ca01cf5)
• verification: parse browser endpoints before provider calls (3ae02f6)
• verification: retain Hopper ownership evidence across owner exit (#5357) (799e826)
• verification: reuse shared output schemas in Electron checks (c73cf0a)
• verifiers: align WABT operation timeout (#4117) (cd64e24)
• verifiers: centralize failure and cleanup ownership (72ba1cd)
• verifiers: consolidate native client command lifetimes (2250e67)
• verifiers: consolidate shared helper ownership (48ff37f)
• verifiers: expect the session-continuation regex overflow reason (#7045) (6bcd243)
• verifiers: join model fixture request finalization (de088fc)
• verifiers: launch npm through Node on Windows (#4153) (6ae59f3)
• verifiers: load shared source without compiler processes (#7012) (1184819)
• verifiers: own browser fixture setup and cleanup in one scope (fd8a2e9)
• verifiers: own setup terminal and snapshot lifetimes (d01ee7b)
• verifiers: propagate session assertion failures synchronously (ed86f9c)
• verifiers: read packed bridge without extraction (f0d175d)
• verifiers: report adb operation and cleanup failures together (139d86b), closes #4260
• verifiers: require positive ownership and restore cleanup coverage (eca18e0)
• verifiers: share command ownership and preserve stdin (0402012)
• verifiers: share package command and workspace ownership (d9660eb)
• verify-package: read Hopper installer applicability from its owner (#2973) (e1897c3)
• verify: assert structured source-map omission coverage (54f5c55)
• verify: close both sides of the browser proxy (f7366a5)
• verify: compare matching browser source selections (7f3e32c)
• verify: decode Hopper dispatcher file URLs (3f11bd9), closes #2587
• verify: follow dynamic Hopper tool availability (281e41f)
• verify: isolate package archives and published canary caches (3eb7dbd)
• verify: own asynchronous Ghidra prerequisite inspection (7d79a6a), closes #4912
• verify: reconcile PR-212/215/228 package E2E expectations (cfa110c)
• verify: remove stale mocked bridge package probe (826583d)
• verify: report every owned cleanup failure before success (131b2d8)
• verify: report final success only after resource cleanup (ee043e2)
• verify: request command JSON for Cutter inspection (f0b9ef3), closes #4912
• verify: restore owned firmware fixture hashing (f4456dc)
• verify: tolerate exited Hopper helpers (b167bd7)
• verify: unwrap canonical popup scenario secrets (06bafde)
• views: centralize retained-result validation errors (b8c1b45)
• views: preserve owning layout field diagnostics (fc52858)
• views: select every retained module path without losing identity (f719dc4), closes #6790
• wasm: accept unpadded WABT section rows (#1963) (9eee709)
• wasm: attribute invalid paths to their selected fields (#2796) (0bc422d)
• wasm: inspect modules whose custom section names contain NUL (#1981) (1febc22)
• wasm: parse source-phase import glue without evaluation (fd08a22)
• wasm: pass glue filenames to the JavaScript parser (#4485) (f4cabe5), closes #4474
• wasm: preserve ambiguous identity and partial metadata (af8f0ba)
• wasm: preserve core inspection with optional metadata warnings (6c6e2ad), closes #6812
• wasm: preserve debug module names in WABT output (#1967) (b777e5d)
• wasm: preserve leading BOM in custom section names (#2102) (abc8c6d)
• wasm: preserve original glue source locations (#2114) (cddf31d)
• wasm: preserve partial name observations and coverage (1e688e4), closes #6885
• wasm: refuse unretained summary delivery before provider work (#5274) (8ecbb74)
• wasm: report WABT output past its budget as a resource constraint (#2117) (42667fc)
• wasm: retain acquired inputs across failed inspection (aced9fa)
• wasm: retain actionable provider configuration diagnostics (f1126ff)
• wasm: retain cancellation through final cleanup (321cacb)
• wasm: retain cleanup ownership through WABT recovery (22a0746), closes #4787 #4798
• wasm: retain cooked directive literals in glue references (4f87f02)
• wasm: retain glue query and fragment across line terminators (#6802) (d65c027)
• wasm: retain multiline glue query and fragment literals (d65c027)
• wasm: stop appending WABT remediation to unrelated runtime-root failures (#2084) (ea2f94d)
• wasm: test glue literals for a .wasm suffix in linear time (#6237) (6b55802)
• web: preserve JSON identity and coverage contracts (79805f2)
• web: preserve script export failures through cancellation (888b2af)
• web: preserve static WebMCP schema property coverage (d23be5c), closes #5075
• web: read WebMCP inputs from schema properties (ebd5a82)
• web: refuse an existing script-export destination as invalid input (#6313) (b5dba08)
• web: reject NUL bytes in web tool local path inputs (499ac18)
• web: retain capture read cleanup through export (95a77b6)
• web: retain uncertainty for incomplete capture inventories (#513) (d8c18f6)
• web: select source grammar for module tracing (9974512)
• website: align the language picker chevron (#3805) (aa52137)
• website: clarify Android host and JDK requirements (5691606)
• website: clarify translated evidence and runtime observations (f1f5582)
• website: clarify translated terminology and RTL flows (a956275)
• website: correct Korean FAQ translations (#3276) (1c296f1)
• website: correct mistranslated zh-CN catalog entries (#3856) (29b8769)
• website: correct the Korean skip-link label (#3280) (9385060)
• website: correct Turkish translation errors (#7015) (de37dfb)
• website: give navigation room and refresh contributors (#3851) (a1ca8c7)
• website: handle UTF-8 output and slash refs in link audits (#4123) (3f35eac)
• website: identify publication verifier requests (e6905c1)
• website: incorporate multilingual contributor refinements (d981a58)
• website: keep omitted language selectors free of whitespace (8583a19)
• website: preserve template-owned HTML formatting (e964a06)
• website: prioritize getting started across language editions (8cbd57c)
• website: use Noto Sans KR for Korean text (#3821) (48c3d2d)
• website: wrap mobile navigation at enlarged text sizes (#3598) (f33b7bd)
• web: track aggregate cleanup through live owners (f65a98f)
• win32: probe .cmd/.bat runtime shims via cmd.exe to avoid spawn EINVAL (#505) (31ed005)
• windows: accept ordinary drive path separators (#791) (b62931f)
• windows: admit volume roots with existing write handles (709e99d)
• windows: align path handling across Hopper, Electron, and ADB (#5235) (b1ff868)
• windows: allow Java to read retained target snapshots (#1027) (28d5c39)
• windows: bring the real Windows Ghidra verifiers up to date (#1863) (ea40f71)
• windows: clear readonly when no other file attributes remain (c553d11)
• windows: end output streams before releasing owned handles (dd1c879), closes #3230
• windows: explain missing native artifacts and verify output drain (6add17a)
• windows: explain when Windows refuses to load the verified native addon (#6832) (39aca92), closes #5723
• windows: grant retained roots the rights required for cleanup (68081ac)
• windows: honor directory readonly semantics during cleanup (1a3a96d)
• windows: load native controls in Node-API hosts not named node.exe (#1531) (ea1c164)
• windows: preserve caller affinity only within one processor group (#2202) (ab62ee9)
• windows: preserve drive-root private runtime paths (ee46323), closes #1690
• windows: preserve transient runtime admission failures (#2467) (1724077)
• windows: relax owned parent sharing before admission validation (db689f3)
• windows: remove cancelled snapshot outputs (#957) (d76f7d1)
• windows: report missing native launch controls as unavailable capabilities (#6277) (0d5c7b6)
• windows: resolve Node-API imports from the host executable (ea1c164)
• windows: retain failed native inspection ownership (#1826) (0b4ce83)
• windows: retain native handles when close is unconfirmed (#5772) (43ac3d1)
• windows: retain primary snapshot and cancellation failures (5f9ac2c)
• windows: retain runtime authority after cleanup failure (af7a439)
• windows: retain runtime ownership and clear readonly attributes (d69acc3)
• windows: retain unpublished runtimes after cleanup failure (f78d137)
• windows: retain unsettled jobs for cleanup retry (76b214e)
• windows: retry owned runtime cleanup on sharing conflicts (0679a79)
• workers: retain observed protocol failures across cancellation (cac12ae)
• workflows: keep caller-input details in workflow input errors (#1089) (289aef6)
• workflows: preserve punctuation in filesystem source paths (#521) (5b28a8b)
• workflows: retain container presence in export shape comparisons (#523) (3854458)
• workflows: retain residual unknowns through CLI and MCP (0136ee8)
• workflows: retain staged output ownership and cancellation semantics (7285e15), closes #1968
• workspace: migrate legacy integrity identities (d092d4c)
• zip: retain raw filename provenance for legacy decoding (2e03251)
• zip: validate trailing archive record candidates (#6937) (c298d54)

Performance Improvements

• analysis-view: reuse validated immutable captures (#5349) (4e716b0)
• analysis-view: reuse validated immutable parents (8f7d12e), closes #4810
• android: filter class pages before bridge serialization (#4791) (2d84c80)
• android: validate prerequisites once per retained JADX session (acd8d86)
• apktool: avoid duplicated primary strings on request (7c458f0), closes #4982
• apple: reuse retained Interface Builder graph validation (#5885) (33f9129)
• apple: reuse scalar schema during plist projection (85e38ac)
• apple: state each NIB object's class, label, and ID once (#1477) (5f6bb7a)
• apple: stop repeating the archive path in Interface Builder evidence (#1460) (b118f04)
• application: scan version artifacts in parallel (528c05e)
• application: scan version artifacts in parallel (c00739b)
• artifacts: bound stable reads to one snapshot buffer (#6966) (4a041ae)
• artifacts: deliver the inspected artifact graph once (#1473) (3c7b176)
• artifacts: index observed parents for deep archive paths (a147ecd)
• artifacts: name each edge's child through its occurrence (#1493) (a0e5e9d)
• artifacts: overlap bundle magic reads while enumerating dylib roots (#3248) (307af04)
• artifacts: replace quadratic ZIP overlap checks (#1013) (76e7e51)
• artifacts: reuse the admitted ASAR header size (cb13a27)
• artifacts: reuse trie membership for case-folded siblings (cef6d6d)
• artifacts: run the asset catalog and Interface Builder bundle walks together (#3285) (0434576)
• artifacts: share sealed inventory and report in inspect_artifact (#2690) (11268fe)
• artifacts: stop parsing parent paths after a missing branch (bb764d2)
• artifacts: stop repeating every artifact path as Evidence locations (#1492) (1f692c8)
• artifacts: stream ASAR members without full buffering (#962) (abd7a5e)
• batch modern IDA callee function lookups (0c6fed9)
• browser: lazy-load Playwright sessions (305e729)
• browser: normalize precise coverage once by script identity (3d79903)
• browser: parse captured module URLs once per lookup (#1829) (ca11162)
• browser: share JSON shape paths across repeated array rows (d510f3e)
• build: avoid duplicate documentation generation (c701376)
• call-path: prune dead ends and enumerate without recursion (#909) (e52fe97)
• catalog: record default catalog digests at build time (#4041) (c61c108), closes #3813
• ci: keep fast built shards under ten minutes (#5652) (c0cbbf8)
• ci: move full mutation sweeps off the release path (92a0edf)
• ci: pack each test tier from its own timing history (#5799) (ea24207)
• ci: preflight mutation configurations during fast feedback (1b46398), closes #3281
• ci: share bytecode across fresh Apple artifact subprocesses (ba7df3f)
• ci: share trusted caches and fail fast on PR test failures (#3007) (0bf01df)
• ci: start source feedback early and diagnose stalled runs (#3013) (6510d0d)
• ci: upload only current portable build cache entries (2092f90)
• ci: use tsrs and reduce PE acceptance startup (#5795) (905cbaf)
• cli: bundle runtime entries to reduce Windows startup I/O (#1996) (d93fbda)
• cli: defer binary provider composition (21dbcf7)
• cli: defer catalog digests and use canonical cache scope (9a15525)
• cli: defer command-specific analysis implementations (a4dd4e8)
• cli: defer command-specific modules until dispatch (a82d14e)
• cli: defer Playwright and isomorphic-git until a command needs them (eeb83f6)
• cli: defer unused catalog work during command startup (#920) (9a15525)
• cli: prepare positional token schemas only for the selected command (315b234)
• cli: write compact JSON when output is not a terminal (#1413) (ca3131b)
• comparison: reuse canonical sort keys (#990) (ebb065e)
• domain: avoid duplicate readiness bundle validation (29ff887)
• domain: batch canonical digest writes with bounded buffer (c675305)
• domain: batch canonical digest writes with bounded buffer (dca1490)
• domain: order JSON shapes through their structural tree (31bfff6)
• domain: reuse canonical JSON key encodings (89ea2ca)
• dotnet: index declaring-type ranges once per metadata table (#918) (7a9f587)
• dotnet: index ordered declaring-type ranges once per table (7a9f587)
• dotnet: reuse authenticated artifact snapshots (c5e8871)
• eliminate repeated work in analysis hot paths (fbe442b)
• entropy: separate physical reads from report resolution (#6950) (b5c42df)
• environment: decode only selected replay query values (96ea32b)
• environment: index observed-state write cutoffs (#5350) (d148ce0)
• evidence: authenticate and seal imported bundles in one pass (b123b2e)
• evidence: fuse streamed JSON token handling (#1694) (13e03e9)
• evidence: group repeated caveats with their source operations (1e377e6)
• evidence: remove disposable ledger work from standalone import (8fb79c6)
• evidence: reuse authenticated comparisons through aggregation (26bffb9)
• evidence: reuse authenticated file snapshots during session import (#1721) (966dc3a)
• evidence: reuse authenticated unknown mutation snapshots (042dcaa)
• evidence: reuse sealed bundle reads in compare and export (#2715) (9680da7)
• evidence: scale imports and dependency graphs (#941) (7dc40d3)
• evidence: stop copying normalized results into raw_result (#1402) (499e2f5)
• evidence: validate ledger mutations incrementally (809dfbf)
• evm: avoid repeated cleanup diagnostics (#1622) (c12a532)
• flutter: add opt-in retained AOT summary and string pages (23de4f7)
• frida: add retained summaries for session status (#5661) (4bfdadb), closes #5640
• frida: evict captured messages without copying the whole queue (#2628) (6a05248)
• ghidra: aggregate binary overview at the provider boundary (#4754) (ae029fe), closes #4746
• ghidra: compile bundle activator with bridge scripts (#1931) (0f4992f)
• ghidra: omit redundant raw results (#5355) (58d6043)
• go: summarize build identity and query retained metadata (#5524) (c2858d2)
• hopper: resolve string search records once per query (#1229) (9426c3f)
• hopper: reuse decoded records for literal string matches (#5017) (63c9708)
• hopper: stop repeating Hopper replies as raw_result (#1405) (1f0f728)
• inspector: bound runtime script location authorization (#945) (58381ee)
• javascript: aggregate semantic family coverage once (#1410) (4d8ef3f)
• javascript: analyze member chains without recursive copying (#932) (dcde958)
• javascript: avoid quadratic temporary matching state (388b907)
• javascript: cache canonical export comparison sort keys (#1028) (63ba742)
• javascript: check wrapper IPC duplicates by invocation set (#3783) (949228b), closes #3670
• javascript: compare scalar semantic query seeds directly (2014ee7)
• javascript: count candidate relevance without a second adjacency (dce81ca)
• javascript: defer ambiguity expansion in version comparisons (#2962) (388b907)
• javascript: defer ancestry for member identifier roles (3e6ac23)
• javascript: derive the application graph ID once (934ffd2)
• javascript: hash each semantic evidence context once (#1457) (ef96657)
• javascript: index change-graph nodes once per comparison (33b9b31)
• javascript: index configuration and module lookups (67252b2)
• javascript: index native Evidence links by observed digest (87d5ec9)
• javascript: index object literal members for exact-key reference lookup (#3836) (788964d)
• javascript: index Promise return-site ownership (#971) (2cedde9)
• javascript: index returned object targets (47947eb)
• javascript: index semantic fingerprint relations (#942) (c92a344)
• javascript: index source-map ignore lists per leaf (#1905) (898d509)
• javascript: index structured observations by path (69fe5b6)
• javascript: index version relationships once per comparison (#1347) (b1e85ad)
• javascript: preselect captured prefix replacements (31de177)
• javascript: prune typed-array element reference escapes (#5139) (6d73515)
• javascript: query selected source-to-bundle facts (#6128) (0583fc6)
• javascript: reduce analysis and source-map work (#955) (c7530f9)
• javascript: reduce retained semantic analysis allocations (#1601) (b28c033)
• javascript: remove duplicate workflow Evidence snapshots (6db97d5)
• javascript: reuse capture completeness during load classification (bd972bf)
• javascript: reuse collected callable identities for returns (d3088c3)
• javascript: reuse cycle sets during semantic evaluation (bb074d8)
• javascript: reuse graph buckets and query indexes (cf34636)
• javascript: reuse parsed source across analyses (adc4852)
• javascript: reuse semantic member-mutation lookups (#2941) (0c6c571), closes #2498
• javascript: reuse the source-analysis worker within a process (#5819) (647717c)
• javascript: reuse validated immutable graphs (#1112) (ec6db0f)
• javascript: share one definitions pass and index wrapper IPC dedupe (#3779) (59f528f), closes #3670
• javascript: skip nested callables during fingerprint traversal (#1871) (097f0d5)
• javascript: skip the repeated-prefix scan on first capture visits (#1789) (41544fb)
• javascript: stop repeating the semantic identifier strategy per fact (#1474) (7296f2b)
• javascript: validate semantic factory inputs once (3d876c5)
• javascript: validate the version change graph once (#1370) (037709a)
• json: encode streamed JSON iteratively (#1322) (56598be)
• kuna: reuse sorted string inventory for exact lookups (c6b6275)
• managed: add retained member summary and pages (#3061) (7484401)
• mcp: advertise each tool JSON Schema once per target (#1059) (5ccb924)
• mcp: bundle internal modules to reduce Windows startup I/O (76e4153)
• mcp: compact repeated session discovery facts (#1988) (6395e8d)
• mcp: default to compact input schema advertisements (#5975) (aa51e43), closes #5861
• mcp: defer analysis runtime after catalog discovery (#4424) (0b7213c)
• mcp: keep Playwright and type-only imports off MCP startup (#1691) (0ecf3f2)
• mcp: record catalog identities for all schema profiles (#5415) (c23e161)
• mcp: reduce cold-start work (8ec9bb1)
• mcp: reduce cold-start work (fecddc0)
• mcp: reduce Windows startup module resolution (#1814) (76e4153)
• mcp: reuse input schemas without losing caller guidance (#1162) (e1afbc1)
• mcp: reuse output validators across catalog refreshes (#1433) (dc5af6d)
• mcp: share repeated output schema definitions (441813c)
• mcp: stop advertising placeholder input descriptions (#1479) (9defed9)
• model: avoid decoding omitted GGUF strings (#5781) (7d8e4e4)
• native: add opt-in Mach-O summary delivery and retained pages (#2634) (bf34d0d)
• nativeaot: index type closure and preserve scan coverage (ce61680)
• native: index admitted value-trace nodes (c734551)
• native: index call-binding parameter and return nodes (044aa34)
• native: query retained export table facts (#6907) (57b1f82)
• native: record macOS command provenance once in its Evidence (#1430) (6375cca)
• native: record pwntools diagnostics once in their Evidence (#1404) (7623e21)
• native: run independent Mach-O slice commands concurrently (#2466) (2c7240c)
• native: skip llvm-nm's dyld-info pass when the symbol table names every export (#3200) (e579122)
• process: batch liveness rechecks within ownership phases (e6d0b39)
• process: batch ownership tokens during rooted cleanup (b22d817)
• process: share batched token observation across ownership checks (22fdcb8)
• process: share settlement probes across captured groups (92a901e)
• process: stop padding rendered terminal lines to full width (#1450) (2781cad)
• providers: assemble fragmented responses once per line (#911) (df7151b)
• reconstruction: index coverage evaluation (#983) (f26c8b5)
• reconstruction: index semantic evidence contexts per derivation (ac9709a)
• reduce MCP launcher and browser capture overhead (#4350) (0cd4eaf)
• reference: size read buffers from admitted file lengths (5a77a96)
• retain call path ancestry once per visited node (5e4ec0f)
• reverse: add retained GDB and objdump summaries (#5614) (17f581f)
• rust: query selected dependency facts from retained Evidence (#5815) (5241597), closes #5802
• schedule batch decompilation reads on demand (06fe7ee)
• schema: reduce retained integer validator allocations (#4360) (7590b50)
• server: cache advertised JSON schemas (6743644)
• setup: reuse initial diagnostics during planning (#940) (118d43e)
• snapshot: avoid redundant result copies and serialization (552634d)
• snapshot: avoid redundant result copies and serialization (569d2bc)
• snapshot: restore large legacy caches within live memory bounds (092de8f)
• test: batch compatible client profile lifecycles (0153b4d)
• test: reuse CLI boundary worker module graphs (f178bf1)
• test: reuse one compiled CLI for export-binding parity (#5679) (71b6965)
• test: reuse one compiled CLI for the remaining hot command files (#5784) (0ad4275)
• test: reuse one compiled CLI process per JavaScript application file (#5676) (ccfaf52)
• test: reuse one stdio MCP server per JavaScript application file (#5658) (40428da)
• test: reuse the CI scope Git baseline (ef5f9aa)
• tests: consolidate TypeScript dialect producer checks (01762b1)
• test: share SDK catalog compilation across deferred clients (5909430)
• test: share stdio analysis for comparison fixtures (43dafb5)
• test: speed up local and CI validation (1546a8d)
• test: speed up local and CI validation (42fbbb2)
• tests: remove timed output and synchronize browser fixtures (693ed33)
• tests: reuse CLI compilation for exported binding checks (55cef25), closes #4079
• tests: reuse MCP connections within source matrices (9d5b931)
• tests: reuse stateless workflows and immutable fixtures (5f4c7ff)
• tests: share native Interface Builder encoding production (aedd394)
• wasm: skip payload text during WAT framing (70835d3), closes #5760

Code Refactoring

• adapters: remove redundant error and provider facades (6a34be4)
• adapters: split oversized provider workflows (1a99a60)
• adb: encode package verdict certainty in the result type (75ca7c0)
• add incremental capability migration safeguards (#819) (75f50d8)
• analysis-view: consolidate result and budget ownership (731109b)
• analysis-view: unify request and source ownership (b7f8bbb)
• analysis: remove caller-selected result caps (a8c58c6)
• analysis: remove fixed result quotas (20152a9)
• android: group layered source and verification (#873) (8e8921d)
• android: own search summaries at the producer boundary (76b5695)
• apk: consume shared BER node facts (4861117)
• apple: group artifact producers and verification (#952) (ef1a0cc)
• apple: remove unused class identity re-export (4ff2dad)
• apple: reuse artifact stream byte validation (e05beb3)
• application: reuse graph evidence resolution (4e8aa98)
• application: use current Evidence and CLI contracts (faf219e)
• app: split session and CLI workflows (c6ee004)
• app: split Setup and ProcessOwnership modules (#628) (3c84080)
• artifacts: centralize completed file outcomes (2bcd7e6)
• artifacts: centralize stable inventory identities (135d102)
• artifacts: consolidate inventory into inspection (0fe96d9)
• artifacts: consolidate selected source lifetimes (f4f7c75)
• artifact: simplify extraction and inventory results (07ff8b3)
• artifacts: isolate JavaScript file acquisition (#916) (f0a68dc)
• artifacts: move inventory and extraction into provider owners (#1032) (6e4535c)
• artifacts: remove duplicate inventory wrapper (aa6eee1)
• artifacts: remove obsolete contradiction identity input (f2db494)
• artifacts: remove selectors and traversal quotas (8c24272)
• artifacts: remove unused extraction inventory indexes (f4e437e)
• artifacts: remove unused root classifier (5291bca)
• artifacts: retire the test-only materialization facade (9c8f404)
• artifacts: select extraction by logical path (7ba3580)
• artifacts: share inspection validation and prune legacy fixtures (591c87c)
• artifacts: share persistent file source ownership (a834ed1)
• artifacts: simplify inventory traversal (c8d762e)
• artifacts: test inventory changes at materialization boundary (750fb65)
• asar: centralize read failure and cancellation semantics (5da3b7c)
• binary: group session selection and snapshot ownership (#886) (dd114d3)
• binary: move production composition outside application workflows (#965) (33d4761)
• browser: align inspector exclusions with canonical vocabulary (#834) (de9593a)
• browser: centralize scenario metadata budgeting (e79e367)
• browser: centralize shared CDP observation facts (b752930)
• browser: charge source-map records before retention (e762e32)
• browser: clarify inspector capture identifiers (ca035a7)
• browser: derive comparability once per capture pair (24bd2b9)
• browser: map artifact failures at one boundary (5b0373d)
• browser: move bundle fixture composition out of runtime (6021efd)
• browser: open scenario sessions without a factory wrapper (d1983a4)
• browser: remove arbitrary capture ceilings (5dd3b46)
• browser: remove obsolete web script reconciliation (1778a3d)
• browser: return complete observation evidence (0e2738f)
• browser: return complete scenario observations (e80fe41)
• browser: reuse CDP endpoint parsing (00abf45)
• browser: separate bundle state from AST inspection (0081925)
• browser: share authorized main-frame polling (eec75ce)
• browser: share canonical identity digest (a6d9e49)
• browser: share cleanup observation facts (9c0c276)
• browser: share composed artifact cleanup ownership (2765fc1)
• browser: share scenario transaction identity indexes (407a718)
• build: generate MCP tool catalog at build time instead of committing it (#997) (35a4e18)
• captures: require canonical producer metadata (3283a45)
• catalog: import CLI metadata from its owner (8c96baa)
• centralize Electron execution limits and action projection (5eada7e)
• cleanup: share failure composition and retain native UI owners (2a0b58e)
• cli: collapse duplicate CLI layer into src/cli (#630) (494d4db)
• clients: retain inspected command ownership (9548953)
• cli: execute validated model and GPU requests (5f4bd6b)
• cli: remove redundant alias coverage metadata (e09b063)
• cli: remove redundant runtime provider contexts (7fbc2b5)
• cli: share analysis snapshot option contract (d77bc0e)
• cli: share direct analysis tool types (329fdf6)
• cli: share parsed output controls across consumers (8d8d85b)
• cli: share process environment preparation (c2caae8)
• cli: share registered command traversal (b2dc450)
• cli: share runtime between CLI and MCP (97541d8)
• cli: split core analysis command registrar (#858) (8b9940a)
• colocate investigation record implementation (#867) (bb19c94)
• compose investigation record ownership (#845) (ce73c3f)
• config: centralize parsed registration environment keys (9a13c4f)
• config: prune unused format wrappers and launcher export (81ae838)
• config: share HTTP listener port contract (dd46a13)
• config: take the environment as an input at every configuration read (#554) (53fe7d6)
• consolidate boundary semantics and prune redundant tests (392f1f3)
• contracts: remove duplicate schema aliases (4593c29)
• contracts: simplify workflows and drop readiness tool (7acac61)
• contracts: split tool contracts by family (#634) (5295d56)
• core: consolidate internal aliases and startup budget ownership (71dc6fe)
• core: import shared contracts from their owners (9a42603)
• core: use canonical file outcomes and unknown schema (1067792)
• coverage: evaluate inline without workspaces (9e76054)
• coverage: move fixture authoring out of the runtime (254f9d9)
• declare auxiliary capabilities from source (#853) (4a6c17c)
• doctor: retain parsed configuration diagnostics (5ea2c28)
• domain: centralize relationship coverage interpretation (30128a0)
• domain: consolidate canonical ordering and digest helpers (#624) (ba3869c)
• domain: consolidate duplicated semantic member and literal helpers (#550) (09830da)
• domain: consolidate projection and verification digests (ce5bc8c)
• domain: consolidate property-key extraction behind semanticStaticPropertyKey (#823) (764ff05)
• domain: converge comparison mechanics on shared vocabulary (#824) (c13c9d4)
• domain: encode comparison and lifecycle states exactly (#473) (d65730c)
• domain: extract artifact path syntax helpers (#830) (ef535b8)
• domain: extract source-map envelope walk and disambiguate stringValue (#828) (64ebdf4)
• domain: map validation taxonomies and add inventory Result seam (#833) (78f4848)
• domain: own digest and prefixed identifier shapes in one module (#547) (ea58834)
• domain: remove obsolete comparison representations (5510b27)
• domain: remove provider-specific target and snapshot state (21da71e)
• domain: reuse canonical ordering and digest owners (51be954)
• domain: share AST property name reader (4f4cc59)
• domain: split analysis boundaries (e2c868c)
• domain: split error taxonomy into thematic modules (#636) (735c100)
• domain: split Interface Builder keyed-archive parse from graph builder (#859) (da09706)
• electron: retain complete active observations (e8c56e0)
• electron: reuse retention and capture contracts (63fe0eb)
• electron: share observed process and window schemas (306ca98)
• enforce canonical evidence and provider boundaries (63bf914)
• environment: reuse admitted capture facts in builds (22b8830)
• environment: reuse the owned path segment decoder (66aacc6)
• erlang: reject overflowing BEAM atom lengths (be85386)
• errors: centralize input failure construction (1635ead)
• errors: remove stale workspace failures (f570d40)
• evaluation: move agent grading into development ownership (3ad465a)
• evidence: carry producer-owned source records (835904e)
• evidence: centralize analysis observation facts (6dff375)
• evidence: centralize comparison identities and source recording (a59abe9)
• evidence: centralize JSON payload admission (58fb824)
• evidence: move artifact construction into domain (7f9a03d)
• evidence: own bundle validation failures (8b1e314)
• evidence: remove obsolete ID resolvers (a3920e2)
• evidence: remove session ledger quotas (dca293a)
• evidence: remove superseded ordering wrapper and document exclusions (1b14870)
• evidence: require current coverage commitments (db8128d)
• evidence: share canonical ASCII ordering rules (c465ff5)
• evidence: share comparison payload interpretation (92f28b2)
• evidence: share profile and completion digest owner (b88bdfc)
• evm: bind offline analysis through a static descriptor (ad08510)
• evm: project admitted interface facts once (9adc612)
• files: allow reader-owned cancellation failures (5e13e0a)
• files: use caller paths for local evidence files (c34efca)
• filesystem: preserve admitted file facts (a891bb8)
• filesystem: share directory cleanup ownership (215001a)
• filesystem: share stable read state comparisons (d69752f)
• finish lint cleanup (2bea405)
• firmware: centralize audited tool requirements (99be47a)
• firmware: group layered source and verification (#878) (507e8b3)
• firmware: remove unused hardware attribution scaffolding (959ab0c)
• firmware: remove unused memory map schema declarations (7af1b20)
• firmware: split verification into staged functions (#2713) (a8b50ea)
• gdb: own command record snapshots and stream groups (1fbfbf7)
• ghidra: centralize load image check recording (6bb4f4b)
• ghidra: centralize shared profile commitments (1a38745)
• ghidra: derive reference facts from shared schema (3966c92)
• ghidra: extract createClient and load-image attestation (#856) (b7df5b7)
• ghidra: give function boundary scans one owner (225f26a)
• ghidra: remove redundant schema markers (c2a6f4b)
• ghidra: share session startup observation checks (eab4e47)
• give Inspector its own capability directory (#869) (021ba69)
• go: parse module records through one byte contract (31fc976)
• go: retain parsed build module facts (b6519aa)
• gpu: retain parsed AMD target identities (3c0b26d)
• hopper: move verifier assertions out of runtime (008931a)
• hopper: reuse canonical Mach-O header facts (5477a6b)
• host: inject platform and environment instead of reading them ambiently (#549) (5b59b87)
• import shared limits and projection helpers from their owners (c5c5ff4)
• input: share schema issue error construction (65a6288)
• inputs: own absolute path validation in shared contracts (cdd718f)
• investigation: share immutable evidence reads (74ed67d)
• javascript: bind application links only at graph finish (8ba0a88)
• javascript: centralize package and JSON document facts (37e92e4)
• javascript: centralize source coordinate operations (ddce4bb)
• javascript: centralize source range comparison (c9500d3)
• javascript: consolidate semantic graph boundaries (6298c84)
• javascript: consume normalized feature seeds (71a024c)
• javascript: group application workflows and verification (#896) (0804722)
• javascript: group domain semantics and contracts (#907) (f6a58f1)
• javascript: name retained require call facts explicitly (e966b9f)
• javascript: normalize erased expression syntax once (b628bba)
• javascript: own application node merging in the graph domain (51e0df9)
• javascript: own coverage facts and reuse block prefixes (f62a2ba)
• javascript: own graph Evidence envelope validation (c9f95ea)
• javascript: own paired graph evidence resolution (f276bcb)
• javascript: own property capture translation (247c8f4)
• javascript: own runtime reconciliation failures (f4b2ba1)
• javascript: own source range validation once (452e3cc)
• javascript: parse runtime evidence into one verified owner (006b295)
• javascript: remove analysis ceilings (9aec690)
• javascript: remove obsolete in-process projection runner (15edc71)
• javascript: remove obsolete scope truncation statistic (449d570)
• javascript: remove redundant semantic query passes (d1f0451)
• javascript: remove superseded full-IR analysis pipeline (e9abf39)
• javascript: retire synchronous artifact graph runner (8c6cddc)
• javascript: reuse argument binding lookup (dd3497e)
• javascript: reuse canonical AST traversal (a769915)
• javascript: reuse parsed semantic query contracts (0b17cb6)
• javascript: reuse semantic member-chain facts (cee14e1)
• javascript: reuse validated source-map decoding (f64790b)
• javascript: share Babel child traversal (0f10499)
• javascript: share computed-key callable ownership (76fa530)
• javascript: share result binding projection and facts (dbcec4c)
• javascript: share semantic call-site lookup (94a2c60)
• javascript: share semantic evidence at fact construction (e3bbb9a)
• javascript: share the reconstruction input contract (bdf15b9)
• javascript: unify application workflow ownership (da9a580)
• javascript: use shared canonical identity primitives (34aa22d)
• json: consolidate representation size accounting (3c5c887)
• json: reuse shared parser at CLI and shape boundaries (4f54379)
• kuna: centralize installation cancellation projection (55f5c8d)
• logging: unify startup policy and test ownership (49c9c9d)
• macho: centralize FAT declaration facts (cd10ee1)
• macho: separate dyld import and export parsing (aa357d6)
• macho: share thin header CPU interpretation (44521d3)
• managed: carry parsed signature type coordinates (bc1c507)
• managed: derive inspection from PE CLI extents (dfad09e)
• managed: derive verification declaration facts from their owner (81ab0dd)
• managed: give MethodDef row facts one owner (250e209)
• managed: group capability workflows and verification (#926) (28713f9)
• managed: own successful PE inspection identity (6b44e35)
• managed: remove obsolete throwing domain facades (850abe5)
• managed: retain decoded metadata token facts (271ef32)
• managed: retain TypeDef row ownership through projections (f470350)
• managed: return singular admitted evidence records (fafc188)
• managed: reuse canonical JSON digest owner (87c8086)
• managed: reuse the member comparison input contract (27dc973)
• managed: share artifact and token identity schemas (a2805bc)
• managed: share compressed integer format decoding (6d4cc6e)
• managed: share decoded type definition facts (d0432d6)
• managed: share metadata token schema (183b4d4)
• managed: split metadata analysis (20c88dd)
• managed: unify coded-index identity and validation (ce3c27f)
• manifests: consolidate commitment ownership (3da7454)
• mcp: bind Electron provider failures at registration (d8948ef)
• mcp: consolidate contract and summary policy owners (3d4f556)
• mcp: consolidate Evidence recording and operation progress (c343b78)
• mcp: consolidate retained-summary inspection workflows (08b8e62)
• mcp: make analysis states unrepresentable (#468) (b8a9da0)
• mcp: remove obsolete managed evidence parser (f7aa191)
• mcp: remove the duplicate result delivery class (92f3298)
• mcp: reuse parsed Evidence tool parameters (19520d0)
• mcp: share pcap summary delivery handling (162bd56)
• mcp: simplify evidence and workflows (6740ed5)
• mcp: simplify tool inputs and inline results (f55c2b9)
• mcp: simplify workflow and observation scope (34d00fd)
• mcp: trust validated inputs and tighten contract fixtures (2646150)
• mobile: retain inventory sources at the projection boundary (c1a0561)
• nativeaot: share report facts across budget stages (14e7459)
• native: centralize procedure and metadata input contracts (44a4c1b)
• native: consolidate command operation admission (ae24b78)
• native: consolidate section and PE subject ownership (3f168af)
• native: extract FAT header format switch in Mach-O slice selection (#632) (38b2933)
• native: group analyst semantics workflows and contracts (#973) (ea4db4c)
• native: match UI controls by explicit object identity (472f313)
• native: remove unreachable command routing branches (f508a1a)
• native: retain contained-span mapping fast path (c85e6d9)
• native: retain one plist JSON parse owner (bf6e49a)
• native: share call observation outcome schema (1ac7ce3)
• native: split Apple dispatch metadata decode facets (#855) (676959e)
• native: use canonical deadline defaults (db87917)
• objc: retire obsolete class discovery paths (8defd22)
• observation: internalize capture budgets (7b3c797)
• observation: retain complete tool results (fa2b6c5)
• observation: return complete inventories (c523c38)
• pcap: give TShark selection and version admission one owner (#3407) (92a9591)
• permission: remove unused authorization helpers (1b0ab75)
• pe: share optional-header structural facts (599099f)
• preserve provider-neutral runtime seams (a8161f0)
• process: allow awaiting physical output closure (182e9a2)
• process: centralize captured command failure facts (0134e15)
• process: centralize comparison evidence ownership (e073f64)
• process: centralize post-run artifact verification (6cd3fa0)
• process: extract capture journal recorder (a32b988)
• process: extract reusable provider lifecycle primitives (70e1a0f)
• process: give the prlimit producer budget one owner (#2698) (782cc3b)
• process: own selected artifact read failures (edc805e)
• process: own worker frame wait lifecycle (1158dc2)
• process: remove duplicate observation and trace entry points (070339a)
• process: remove fixed scenario ceilings (abf7c11)
• process: remove redundant schema version markers (b3aca52)
• process: remove request count ceilings (f2dc749)
• process: remove the redundant scenario parsing alias (584120e)
• process: remove unused paired experiment (e1d755f)
• process: separate capture implementation from analyst workflows (#988) (6aa9afb)
• process: share capture evidence admission (603a7d0)
• process: share decoded NDJSON framing (2604059)
• process: share ownership for isolated analysis workers (715d93e)
• process: share paired prlimit ceiling ownership (#6352) (6dc0f60)
• process: split trace comparison domain logic (75d5a87)
• process: split trace comparison helpers (6d8ecd2)
• prompts: make tool workflows optional (3fd9650)
• provider: declare deep capabilities from source (#892) (b808e2d)
• providers: await owned readiness observations (150e996), closes #4561
• providers: retire obsolete decoding paths (1c07bee)
• providers: separate identities from workflow profiles (b33f68d)
• providers: use canonical artifact and managed identities (87f0051)
• prune obsolete provider and verification code (e198793)
• qlog: reuse capture redaction policy (a496131)
• readiness: share canonical stage validation (adfde01)
• reconstruction: isolate ledger coverage (4f62695)
• reference-imports: share exact literal parsing (d20c7b0), closes #6654
• reference: centralize source inventory rules (8dbe92a)
• reference: consolidate Git metadata cleanup (279c942)
• reference: share graph index projections (6ee87fb)
• reference: share resource failure projection (34fd7bd)
• reference: simplify malformed UTF-8 handling (377df71)
• release: remove obsolete tag CLI and proposal output (f2eb272)
• remove abandoned test-only analysis scaffolding (c93422a)
• remove cross-version investigation workflow (81996df)
• remove forwarding exports and redundant aliases (ad59531)
• remove obsolete forwarding APIs and unify CI contracts (#6181) (a73eac1)
• remove obsolete forwarding exports (4c54700)
• remove obsolete source exclusions and identity wrapper (44c92f8)
• remove redundant contract and syntax definitions (1828cf8)
• remove single-use forwarding helpers (4144e45)
• remove superseded Hopper and Babel compatibility paths (d78892e)
• replay: share sandbox probe arguments (9fca6c0)
• replay: simplify runtime value checks (60cb68a)
• resources: remove redundant helper exports and lease aliases (399e222)
• retire redundant parsing and workflow facades (f90d407)
• retire test-only fallback exports (b22b0ef)
• return complete analysis results inline (a2a3243)
• return complete tool results inline (0d96275)
• rizin: share validated command requests across admission and execution (46217c6)
• runtime: centralize safe JSON parsing and preserve error causes (#629) (e7f54b3)
• runtime: name all silent catch causes without changing diagnostics (#637) (5f27e02)
• runtime: retain complete reconciliation outputs (79ea571)
• schema: remove data-only version markers (5457f4a)
• schemas: share portable identifier and base64 patterns (#1227) (954badb)
• server: admit complete evidence workflows and share handlers (c1b5ccf)
• server: remove registration alias (8097ec4)
• server: reuse availability policy type (eeb4349)
• server: use canonical elicitation type (bb6a58c)
• setup: distinguish provider configuration from registration settings (4946688)
• setup: keep planner helpers private (2d1f961)
• setup: own parsed registration command facts (171f56a)
• setup: reuse desired registration per document snapshot (20bf7d9)
• setup: share publication byte verification (21ff491)
• setup: split setup and CLI registration (07e1b5a)
• setup: validate formats through canonical configuration (4b10665)
• share Android and firmware provider factories (#826) (3ed59b2)
• simplify authorization boundaries (2e5b443)
• simplify doctor and error projections (37f4ac6)
• simplify runtime tools and remove replay engines (#572) (e07b816)
• skill: keep only the canonical skill identity (a7c1e87)
• skill: remove legacy skill compatibility (8cf0dd2)
• snapshot: share persisted execution projection (09b2943)
• split oversized analysis workflows (af2399e)
• split oversized analysis workflows (3e61a63)
• targets: preserve ambiguous MZ header evidence (39d1b2d)
• test: colocate pure-domain tests and reduce test debt (#471) (e91c8c3)
• test: keep coverage at behavioral boundaries (#474) (d4dc940)
• tests: consolidate compiled CLI session ownership (2bd981b)
• test: share browser and apktool fixture lifecycles (7dd6941)
• tests: keep fixture adapters outside runtime (fdf5a33)
• tests: separate fixtures and registration groups (d2dc3cf)
• tests: use fixture-owned temporary cleanup (ae54b96)
• tools: remove arbitrary workflow ceilings (5f73cb0)
• tools: remove artificial analysis ceilings (2f08c7c)
• tools: remove redundant limits and acknowledgements (bd0e341)
• tools: remove remaining arbitrary workflow caps (ecf3ed8)
• tools: return complete analysis results inline (2a6eb41)
• use canonical implementations and types directly (765e809)
• validation: exercise authentication headroom at its boundary (044c970)
• verification: remove unintegrated conformance replay scaffolding (f975f98)
• verification: separate readiness evidence scopes (fbe77dc)
• views: derive layout summary fields from source contract (527ade2)
• web: share retained text artifact metadata (c0eb612)
• windows: keep capability outcomes module-private (585f523)
• workflows: simplify evidence reference inputs (24e1fa9)
• xml: centralize strict document parsing (623339a), closes #4694

Documentation

• adb: clarify emulator observation field (e36df2c)
• add boundary contract guidance (42e6a8a)
• add concise lawful-use disclaimer (#888) (4037c65)
• add Discord community links to README (79bf26f)
• add DX-Ball reconstruction showcase (#876) (895079d)
• add French README translation (84094af)
• add French README translation (9664b2b)
• add Hopper screenshot to README (a699fdd)
• add Hopper screenshot to README (08981a3)
• add Italian (it) README translation (#1455) (a6d6e59)
• add missing src/ directories to architecture.mermaid (#6908) (d29ae43)
• add ml translation (#4792) (af67ad5)
• add Persian README translation with full language navigation (7a7460f)
• add prominent website and showcase links to READMEs (2ccc86c)
• add REA tool design guidance (#485) (36aeec9)
• add README artwork and refine closing sections (4b8e744)
• add README star history chart (#850) (11f27de)
• add repository-local REA tool design skill (7738c1f)
• add responsible-use disclaimer (4a5aec8)
• add ten README translations and expand language navigation (a61491a)
• add the official Trendshift badge to README headers (b6c21b1)
• add the official Trendshift badge to README headers (7d4ed59)
• add website and showcase links to READMEs (#930) (2ccc86c)
• agents: require brittleness review before resolving threads (0365454)
• agents: require related brittleness cleanup in bug fixes (0d8b728)
• align MCP discovery and skill guidance with the stable catalog (#664) (39db9fe)
• align roadmap with direct tool use (eba709e)
• align the Indonesian README with the other translations (#1512) (f63f12d)
• align translated README artwork and layout (ccfbe87)
• align translated READMEs and clarify support guides (5b383b2)
• align translated READMEs and website links with English (d83f098)
• align workflow recovery and current Evidence contracts (7d885d6)
• analysis: define managed-code evidence boundary (80faff3)
• android: link the JADX provider download (3620074)
• api: refresh managed reconstruction contracts (2b06433)
• api: refresh profile source anchors (bd3cf96)
• api: refresh provider source anchors (a7621c2)
• api: regenerate TypeDoc reference (0a66cae)
• apple: describe directory-based framework plist ambiguity (6d74992)
• architecture: clarify map scope and provider wiring (0929fa4), closes #6901
• architecture: define provider selection and analysis profiles (75f8696)
• architecture: define provider selection and analysis profiles (f9f2fbe)
• artifacts: clarify active-reader extraction scope (0c99194)
• artifacts: clarify unsupported DMG extraction (#5555) (0da3691)
• audit and improve localized readmes translations and wording (00a6ac3)
• browser: add an interaction example that captures the visible result (#750) (91daaa6)
• browser: clarify attach coverage and Chromium setup (#2287) (f63674c)
• browser: clarify parser evidence contracts (d0e93fa)
• browser: clarify scenario cleanup after termination (d09be9c)
• browser: correct cache fingerprint completeness limits (60bf102)
• browser: explain CDP detach effects on caller emulation (921fa03), closes #4089
• browser: reconcile HTTP discovery wording with browser sockets (#3484) (55c3129)
• celebrate 110,000 GitHub stars <‰ (#2042) (0d78c99)
• celebrate 170,000 GitHub stars <‰ (#2462) (9188698)
• celebrate 20,000 GitHub stars <‰ (#1079) (9455e7c)
• celebrate 200,000 GitHub stars <‰ (#2897) (b851340)
• celebrate 250,000 GitHub stars <‰ (#3971) (f5b1dce)
• celebrate 30,000 GitHub stars <‰ (6987cb0)
• celebrate 30,000 GitHub stars <‰ (beca997)
• celebrate 300,000 GitHub stars <‰ (#4778) (060eb43)
• celebrate 40,000 GitHub stars <‰ (3edb217)
• celebrate 40,000 GitHub stars <‰ (5ecc98a)
• celebrate 50,000 GitHub stars <‰ (81cdafc)
• celebrate 60,000 GitHub stars <‰ (#1559) (2ec93ba)
• celebrate 80,000 GitHub stars <‰ (#1752) (6ff4d4a)
• celebrate 90,000 GitHub stars <‰ (#1858) (5876779)
• check surrounding cases when changing boundaries (46d195e)
• ci: add a repeatable static analysis example (#6496) (1b3d57c)
• clarify agent reverse-engineering promise (ed4a628)
• clarify aggregate context tools (c7e207c)
• clarify batch decompilation retention limits (bfa60d5)
• clarify capture comparison coverage and identity (a8276d1)
• clarify contribution scope and cosmetic suggestions (1f79002)
• clarify derived values and comparison controls (e6537df)
• clarify evidence applicability and boundary limitations (2443b94)
• clarify evidence ownership and verification guidance (4615413)
• clarify evidence ownership and verification guidance (a9e00b8)
• clarify MCP tool design guidance (36aeec9)
• clarify NativeAOT scope and regenerate conformance ledger (c945931)
• clarify onboarding and align provider guidance (#745) (5af1699)
• clarify ownership and cleanup review guidance (9140dea)
• clarify ownership and interpretation boundaries (64b71b1)
• clarify parser authority and compatibility evidence (a281455)
• clarify REA has no affiliated cryptocurrency or token (#1214) (c2d8146)
• clarify README wording and analysis tool support (97822f2)
• clarify responsible use and preserve third-party notices (#2082) (974f11d)
• clarify the agent reverse-engineering promise (#466) (ed4a628)
• cli: add a managed assembly inspection workflow (#2037) (538f8cc)
• cli: clarify setup consent comment (e869137)
• cli: describe every command input (d4be3e7)
• cli: document opt-in Bash completion setup (#6250) (c9204b9)
• clients: distinguish discovery and schema recovery boundaries (b791f02)
• cli: include Kuna in supported doctor providers (#4624) (#5011) (fd64b1c)
• codify boundary regression checks (efab65c)
• consolidate agent guidance around ownership and boundaries (ba44222)
• contracts: align examples and guidance with produced evidence (2ebaadf)
• contracts: explain canonical URL and skill metadata ownership (e36afa1)
• contributing: explain Windows native prerequisites for source checkouts (#2295) (811bd9f)
• contributing: require human ownership and review readiness (#3286) (90d4098)
• contributing: strengthen issue evidence guidance (#3287) (69b8509)
• correct CLI examples and documentation checks (#655) (fc80ea8)
• correct drift and reorganize English guides (#2207) (7ae3c50)
• correct host requirements in the README analysis tables (#1422) (b32a11e)
• correct inline evidence and Hopper behavior (bf9cce1)
• correct MCP error and capture import guidance (077d6c4)
• correct pull request tool inventory (d806480)
• correct README setup and runtime guidance (5b3715e)
• correct setup capture and recovery boundary guidance (80bc0f5)
• correct stale logging, Ghidra host, and example path statements (#1420) (944981d)
• cutter: explain bridge descriptor discovery configuration (df5c48f)
• define contribution scope and simplify proposal forms (ac6ef95)
• define performance priorities for analysis workflows (#2245) (8e00452)
• define REA contributor priorities (5df4ef6)
• describe complete application analysis outputs (271b162)
• desktop: list all supported IL2CPP metadata versions (866c72c), closes #6672
• document capture v4 and native mounts (aca518b)
• document CLI safety and provider evaluation (efc9bd2)
• document frictionless binary workflow (ee6d539)
• document installation and Linux support (034563a)
• document process capture v3 (50f4a29)
• document resource snapshot workflow (2a45d8d)
• document roadmap analysis workflows (f29f683)
• document the 43-tool workflow (1f235cb)
• dotnet: refresh managed reconstruction api (cc1e47c)
• errors: describe live JSON heap admission (8290246)
• errors: include Omarchy and current host-support messages in error catalogue (#5078) (#5278) (3dce832)
• evidence: define authentication and committed delivery recovery (990d1de)
• explain 6.2 contract and saved-data migration (#1304) (c267e99)
• explain CI scope and native runner reuse (#1348) (6c9161d)
• explain native matching summary construction costs (4c776d5)
• explain the installation workflow (1c83263)
• firmware: document the Windows Unblob submodule checkout (#6464) (3ed9f4b)
• fix architecture diagram and pretty-print tool catalog (#626) (5e7f35c)
• fix stale IDA roadmap item, mermaid paths, toolchain wording (d2aed17)
• generalize reverse-engineering workflow (#488) (4ecc7a7)
• ghidra: define the experimental Windows P0 (8b5ae41)
• ghidra: explain first-query deadlines and recovery (#736) (e2c23f3)
• ghidra: explain server-wide analyzer override scope (98a5e56)
• ghidra: explain supported heap and CPU controls (#1278) (0c6852b), closes #1255
• ghidra: verified macOS arm64 native decompiler build recipe (#2112) (5f79c85)
• ghidra: verify and document the macOS arm64 native decompiler build (5f79c85)
• go: clarify cumulative build-info search budget (#2731) (7fdf7a5)
• hopper: clarify lease directory recovery guidance (#1628) (d901561)
• hopper: document HopperTargetLease realpath fallback (#711) (d3f498c)
• i18n: add complete Romanian README (#7026) (403fef0)
• i18n: add Greek translations (#2985) (ddcdb3c)
• i18n: add Japanese translation (#7061) (4232399)
• i18n: celebrate 80,000 GitHub stars in translated READMEs (#1758) (953a0ce)
• i18n: complete Malayalam locale registration and links (b27e1a7), closes #4821
• i18n: explain translation contribution entry points (4838f44)
• ida: describe catalog-based lifecycle compatibility (a688c79)
• identify official REA installation sources (#2429) (4c83846)
• il2cpp: clarify supported views and native slice selection (dab18c1)
• improve GitHub issue and pull request templates (c490d85)
• improve Korean wording and particles (#1047) (c5d165b)
• include all supported clients in the REA skill (9274118)
• inspector: distinguish passive commands from uninterrupted execution (0a1ad0d)
• installation: clarify that npm 6.3.0 excludes automatic pi and hermes setup (#1637) (6849ecf)
• installation: document Linux procps prerequisite (b11fe63), closes #2763
• installation: document targeted npx dependency recovery (#5353) (e83e3ce)
• installation: limit REA to one project or agent profile (41a2e84)
• installation: list every client missing from npm 6.4.0 (ed4a1c7)
• installation: list every client that first shipped in 6.5.0 (#3465) (ed4a1c7)
• installation: pin manual MCP registration to the release version (#658) (8dd1d84)
• install: explain Claude Code upfront tool loading on third-party endpoints (#2029) (d024928), closes #2019
• javascript: state that duplicate unmapped content stays ambiguous (#6238) (bd5d189)
• jeb: qualify Linux CE native workflows (#5002) (c12d9ed), closes #4996
• keep license sections text-only (e10f1f0)
• keep the 30k milestone in Star History (#1217) (c399670)
• ko: describe update alias and bounded output (5f0bc86)
• ko: preserve established OTP and provider terminology (#6156) (44827a5)
• limits: describe how to design admission recovery (#6368) (0d596fa)
• list all supported clients in the REA skill (#1523) (9274118)
• list upgrade in CLI reference (8a24088)
• make pull request draft status optional (d24ad4f)
• managed: align normalized CIL claims with shipped v1 semantics (9a92a79)
• managed: align normalized CIL claims with shipped v1 semantics (3f788e9)
• managed: distinguish oracle conformance from host verification (08e8a56)
• manifest: align plan with top-level body parsing (fdaffe2)
• mcp: clarify gateway schema recovery without inferring backend constraints (c831c23)
• mcp: describe exact IL2CPP names filter coverage (8e57b76)
• mcp: describe the 100-value completion reply limit (#4086) (2c90082)
• mcp: explain absolute SDK deadlines and client timeout configuration (fbdd040)
• mcp: record real Windows first-query recovery (c89c8f5)
• mcp: state plist inspection session prerequisite (aad3d88)
• move Portuguese toward the end of language navigation (2a4979b)
• move quick start up and mark skill install optional (554e9b1)
• move README image above Discord community (ad86d39)
• move star milestone into history sections across readmes (6e6ff7b)
• move translated READMEs under docs/readme (#2165) (cbe769b), closes #2141
• nativeaot: document the verified Windows-host parser route (#2497) (75e7965)
• native: clarify Darwin runtime breakpoint names (d397ac7)
• native: distinguish analysis memory from source bytes (195cf18)
• normalize inherited source paths (d33213a)
• note Cloud Agent Node.js toolchain (#837) (6aa6350)
• npm: simplify current setup command (#469) (8b62b1a)
• objdump: show debug-link flag forms that keep their meaning (#4068) (cb18d4c), closes #3893
• place community invitation below README navigation (69a45e0)
• place Discord community below setup command (778e464)
• place setup command above README image (c6d3bdf)
• polish the Japanese README and align it with current facts (701efd5)
• polish the Japanese README and align it with current facts (e45da24), closes #958
• prefer the pinned Node.js on Cloud Agent PATH (#5624) (2127095)
• preserve generated source links (2ea375f)
• preserve the native guide title anchor (#2224) (ae41265)
• prioritize agent usability in tool design (ad17fe7)
• prioritize reusable analysis primitives (#493) (9dd72c4)
• process: clarify normalized terminal line representation (78e1308)
• process: clarify terminal progress message fields (#3086) (f353474)
• process: preserve capture invariants (841990b)
• process: verify independent full-report hashing budgets (#1440) (bb6fa1c)
• prune repeated contributor and tool design instructions (5d79387)
• publish VitePress documentation on GitHub Pages (c78fe69)
• readiness: align required stage identifier and checks with evaluator (#2200) (85c5477)
• readme: add Roman Urdu edition (#6499) (524b847)
• readme: add the Linux ps prerequisite to the Korean README (#3270) (535c8ef)
• readme: align localized guide link occurrences (fc2d91a)
• readme: align translated setup and analysis facts (9b656dd)
• readme: move setup command above official-source notice (bee73fc)
• readme: remove CI badges from translations (3298219)
• readme: remove CI status badge (b07e54a)
• readme: restore Greek guide and official-source links (#3021) (14fef73)
• readme: show a dark showcase image on dark themes (#6915) (36cae90)
• readme: sync Korean README with the English README (#3046) (2dc89f8)
• readme: sync Turkish translation (c8ef1f9)
• readme: sync Turkish translation with current README (#2777) (c8ef1f9)
• reconcile product documentation with shipped behavior (addc208)
• reconcile product documentation with shipped behavior (54056a9)
• record runtime and release constraints (62ede51)
• redesign and localize README (051b6db)
• redesign and localize README (910eda6)
• refresh 2.2.0 generated metadata (909139e)
• refresh application workflow API links (4a30820)
• refresh Electron path resolution API (734a4ef)
• refresh generated API links (a2089a4)
• refresh generated API reference (f5f653b)
• refresh generated artifacts for 1.7.0 (3988a86)
• refresh generated artifacts for 1.7.0 (13c79b6)
• refresh generated artifacts for 1.7.0 (4647b32)
• refresh generated roadmap metadata (f904668)
• refresh generated SDK metadata (c824db1)
• refresh Ghidra inventory API links (a45de27)
• refresh managed completion manifest (59d4659)
• refresh managed conformance manifest (23e56c5)
• refresh managed native verification api (849c052)
• refresh managed runtime api docs (798631a)
• refresh Node 24 TypeDoc output (846193c)
• refresh product catalog for 1.7.0 release (0f97e21)
• refresh runtime reconciliation API (87b2348)
• refresh tool catalog and cleanup audit fixtures (53db3a4)
• regenerate 2.1.0 release metadata (2ea4589)
• regenerate JavaScript graph API with Node 24 (da4817a)
• regenerate managed coverage API with Node 24 (e47c00e)
• regenerate tool and evidence catalogs (2f604a3)
• regenerate tool and evidence catalogs (f2bbd59)
• release: restore complete 6.3 migration and ancestry notes (bf58eac)
• release: review compatibility for the current candidate (#3112) (5830088)
• remove retired architecture and migration artifacts (7a0c800)
• repair analysis guide links and document Linux process prerequisites (e572c38)
• repair localized anchors and agent terminology (2596667)
• require buy-in for speculative hardening complexity (02c8532)
• require focused brittleness cleanup and executable examples (d6832c3)
• require partial native facts at provider boundaries (2b86ea9)
• require surrounding boundary checks for review fixes (9833c94)
• security: define controlled replay authority (461990d)
• separate ambiguous and unavailable provider recovery (c3f2b8e)
• separate retained notices from provider version support (0d849b1)
• settings: explain runtime design and provider recovery (e9b21aa)
• setup: clarify prebuild-install warning from optional dependencies (#4881) (#5012) (d2015e9)
• setup: confirm published 6.4.0 client support (57c5aca)
• setup: define optional native update verification limits (8bb466d)
• setup: describe Codex registration preservation (ace4778)
• setup: explain npm workspace launcher failures (292f105)
• setup: identify Qwen and OpenCode release gaps (92cc0ed)
• shorten responsible-use notices across languages (fa87dd2)
• show task-scoped readiness and provider preference in the quick start (880cca1)
• show task-scoped readiness and provider preference in the quick start (5fd0db3), closes #726
• simplify REA onboarding (e1dfe86)
• simplify REA onboarding (d85b661)
• simplify the English README and organize guides (#1043) (28f10cf)
• skill: document capture v4 and DMG mounts (f0a9a3c)
• skill: keep one setup prerequisite policy (0a0f98c)
• skill: route browser actions to scenario capture (a6c3d3a)
• skill: route native runtime questions through explicit workflows (22cf964)
• skill: save CLI application Evidence and read a summary view (#1429) (0b9815b)
• skills: capture measured analysis optimization workflow (9744d07)
• stabilize replay API source links (a8c1057)
• stop and profile unexpectedly costly test runs (1de720e)
• sync French, Indonesian and Italian READMEs with English (#1861) (96547d3)
• testing: note Windows source-checkout suite expectations (#6323) (09416de), closes #6308
• testing: prioritize real workflows and distinct regressions (9588482)
• testing: reference the configured duplication limit (#5758) (335c042)
• thank feature request contributors (9db1fd0)
• tools: clarify complete inline results (3b64c81)
• tools: clarify complete inline workflows (4168174)
• tools: describe uncapped tool behavior accurately (4cea84d)
• tools: update inline workflow guidance (4ad937c)
• update application projection API (b0cb28a)
• update Chinese README guides (#2119) (1b6c899)
• update paired process experiment API (a222327)
• update release boundary to npm 4.1.0 with Windows native bundle (69be514)
• update replay machine API (d74f897)
• update Trendshift repository badge (3f6d6dc)
• website: add a CTF showcase and FAQ (#1077) (a4d77f0)
• website: add beginner help to the Get started page (#1684) (dc676b4)
• website: add beginner help to the native analysis guide (#1689) (92dac97)
• website: add dark-mode styles to the favicon and social card (#6909) (beb41f8)
• website: add essay on reverse engineering models (fe496bd)
• website: add Notion case study and improve onboarding (a6ba772)
• website: add TH04 bullet-ring case study (f8d84da)
• website: add worked guides and keep Pages publishing manual (#925) (4f25ee3)
• website: align Blog community links with the site (cbcba29)
• website: clarify guides and case studies (5065fcd)
• website: continue the Calculator example with reconstruction (4578647)
• website: continue the Calculator example with reconstruction (18a1e8c)
• website: document Apple Silicon Cairo setup for local preview (#1930) (c663181)
• website: emphasize the reconstruction essay takeaways (ed200a2)
• website: explain autonomy and oracle lessons in Touhou reconstruction (72b3209)
• website: explain SEO maintenance and indexing follow-up (bb8ff2c)
• website: finalize the Touhou essay for publication (07d4165)
• website: highlight the setup guide on the homepage (#1714) (8be7ad4)
• website: improve model essay transitions and narrative flow (ca07373)
• website: introduce the worked homepage examples (f6f5c16)
• website: invite deeper projects and reader feedback (3fb9ffa)
• website: link the Discord community and REA on X (#1469) (79f6756)
• website: list the setup guide first on the Guides page (#1688) (ea06264)
• website: outline the Touhou reconstruction workflow (130ffdf)
• website: publish model essay in all supported languages (3d78a57)
• website: simplify reconstruction evidence in model essay (b06751b)
• website: simplify the Blog introduction (3ea0233)
• website: use straight quotes in model essay (806ff57)
• website: write the Touhou reconstruction essay (7df2050)
• windows: explain MCP registration launcher limits (cc983b3)
• zh: rename title to � (02ef2b1)

Tests

• acceptance: add application workflow MCP parity harness and scenarios (5ac3dc9)
• acceptance: run loader ownership once through stdio MCP (#6354) (fd5cd1b)
• adb: cover staged APK names and evidence identity (#4354) (ffeba6a)
• adb: isolate cross-platform activity launch regressions (#2226) (3c39a3f)
• adb: verify staged APK identity in reinstall CLI coverage (ffeba6a)
• add critical provider workflow coverage (4716fa2)
• add limit monotonicity and partial-evidence regressions (2cce98c)
• add limit monotonicity and partial-evidence regressions (4afd970)
• add package installation end-to-end coverage (993356b)
• add source-built Hopper conformance fixtures (d648bcd)
• align boundary fixtures with producer contracts (bc411c2)
• align malformed XML and route seed assertions with owning contracts (44d98de)
• align stale fixtures with recent native and launcher contracts (#6945) (b869fa7)
• analysis-view: order the message-cutoff fixture lexicographically (#3018) (1342edd)
• analysis: verify real preset snapshot and cleanup boundaries (#2349) (1dd20ce), closes #2016
• android: allow provider readiness under load (961c3c3)
• android: preserve malformed DEX prototype rejection (#2917) (d82ad1f)
• android: preserve reason in JADX cleanup-failure teardown poll (#1639) (afc9d81)
• android: retain incomplete cleanup failure reasons (#1443) (4e3d335)
• android: retry verified cleanup during fixture teardown (2596f8d)
• android: verify duplicate class inventory behavior on empty discovery queries (#1984) (6611bcf)
• apktool: own lifecycle fixtures and process observations (23def04)
• apple: assert observed collection edge contract (d98105d)
• apple: assert projected interface builder facts (5e16e30)
• apple: attribute omitted edges to their node capacity limit (c6bc25f)
• apple: author admitted archives and typed binary UID references (662e793)
• apple: compare asset catalogs from matching root workflows (9258df0)
• apple: consolidate keyed archive integer verification (#1933) (3b490a7)
• apple: distinguish root discovery from dylib resolution coverage (a4e4863)
• apple: isolate NIBArchive real projection group (fabb68b)
• apple: keep the same-named slice dyld fixture openable on x64 hosts (#2755) (fb28ec1)
• apple: match plist provenance to the selected workflow (1bb2fa2)
• apple: preserve serialized UID and cancellation identities (be2a0b9)
• apple: retain NIBArchive limitation path (7a93cfd)
• apple: separate catalog traversal coverage cases (7665bf0)
• apple: skip ibtool-compiled NIB tests when Xcode ibtool is unavailable (#2070) (7bc57e1)
• apple: verify compiled Mach-O root occurrence facts (#1300) (4bb4c6f)
• applications: import capture fixtures with file URLs (#3050) (89faa86)
• applications: pass Evidence requests to the CLI through files (#3049) (5b16f24)
• application: verify packaged MCP replay (6601e0c)
• architecture: consolidate import boundary verification (2976fac)
• artifacts: assert asset-catalog target refusal only on macOS (44d5b4b)
• artifacts: bind workflow provenance and retained evidence sources (67d02f4)
• artifacts: close owned Mach-O readers after each case (d1e6fe2)
• artifacts: compare matching resource-root workflows (5518363)
• artifacts: cover fixed input-size recovery for Rust and IL2CPP (#6148) (7ffae5a), closes #5405
• artifacts: exercise argument-free extraction preflight (a6d5b3e)
• artifacts: pin per-occurrence roles for direct Mach-O roots and shared bytes (701d90a)
• artifacts: pin per-occurrence roles for direct Mach-O roots and shared bytes (b9e29c5), closes #1234 #1235
• artifacts: read /bin/ls slice layout from its FAT table (#1223) (c89b3a0)
• artifacts: report compiled connector records when a storyboard route is missing (d421d3f)
• artifacts: report observed action routes when a compiled route is missing (c60b737)
• artifacts: respect destination filesystem case sensitivity (b12d0c6)
• artifacts: retire simulated mounts after detach failures (f591e37)
• artifacts: verify compiled Mach-O roles and permissions (4bb4c6f)
• artifacts: verify extraction races with real filesystem changes (1ac8389)
• artifacts: verify native directory identity on supported Windows runtimes (#1069) (e94be95)
• artifacts: verify ZIP cancellation through extraction rollback (ddfd060)
• artifacts: write the storyboard fixture's action in Cocoa syntax (53bfa7e)
• assert Result reasons instead of bare ok checks (#5821) (d9767eb)
• binary: await and validate session status projections (870dcb1), closes #4666
• binary: compare bounded layouts against identical mutated bytes (36f26a1)
• binary: compare layout evidence under the same resource budget (0ee3a35)
• bound CLI validation subprocess concurrency (ff57b75)
• browser: assert strict inputs without legacy fields (9ddf22e)
• browser: avoid duplicating source-map listener setup (9367dc1)
• browser: bound atomic environment polling across navigation (a715fb9)
• browser: consolidate CDP workflows and colocate parser coverage (2682904)
• browser: cover complete screenshot output (3f547ea)
• browser: cover SAZ capture-level null member limitation (dbf8e1e)
• browser: distinguish partial HTTP samples from closed inventories (4118004)
• browser: harden Chrome startup on CI (74c5121)
• browser: inspect provenance in owned graph observations (c8be9df)
• browser: match retained subframe limitations structurally (b3433d0)
• browser: pin DOM and source-map URL policy classifications (#1120) (c1d0002)
• browser: place PNG contract execution at provider boundary (872d46a)
• browser: preserve partial capture and ownership contracts (4becc22)
• browser: preserve resource uncertainty through MCP (#3416) (af6845c)
• browser: reject unmodeled CDP commands in protocol fixtures (017297c)
• browser: remove stale input field assertion (60c110d)
• browser: report redirect status cases independently (5a61562)
• browser: resolve network fixture secrets through typed input contract (62d19a7)
• browser: retain bounded diagnostics for scenario policy failures (f75b1a4)
• browser: route discovery sockets through proxy (e363f0e)
• browser: select a bounded service-worker setup deadline (#6186) (1866964)
• browser: separate resource metadata and omission scenarios (d3a33fc)
• browser: stabilize real shape capture (bb2e243)
• browser: synchronize cancellation before the worker exits (1195929)
• browser: use neutral scenario fixture identifiers (fd25a7e)
• browser: verify page-scoped Chrome transport (c252536)
• browser: verify typed worker refusals across navigations (11f64f6)
• budget CLI output variant subprocesses (8d3587b)
• cap workers across all hosts (bc80359)
• capture: split protobuf MCP acceptance scenarios (#5379) (b5d540f)
• ci: align fixtures with runtime and evidence contracts (3c9b5d6)
• ci: bind npm cache IDs to output consumers (cbc0e97)
• ci: correct Rizin readiness and Hopper launcher fixtures (#3299) (a32b4b6), closes #3295 #3406
• ci: deduplicate browser lifecycle fixtures and cover export ordering (fa36657)
• ci: guard Windows Ghidra workflow isolation (81ed68f)
• ci: guard Windows Ghidra workflow isolation (98540c8)
• ci: keep module mocks in isolated test projects (#5886) (6d356b8)
• ci: stabilize browser source identity fixture delivery (#1023) (ed725da)
• ci: stabilize JADX recovery and ignore generated reports (#1668) (0a6b46d)
• ci: verify resolved cache inputs instead of glob spelling (70c238e)
• classify application scenarios by their actual boundaries (0e0b386)
• classify filesystem and process workflows by boundary (c2b56e3)
• classify filesystem application workflows as boundaries (804c287)
• cli: accept opaque Kuna doctor run tokens (#5677) (044f180)
• cli: align fixtures with current owning contracts (c010faf)
• cli: align Kuna readiness and cancellation expectations (4108d13)
• cli: align reference import failure envelopes (8224aeb)
• cli: allow cold-start integration timing (7d5621d)
• cli: batch redundant client lifecycle dry runs (8578845)
• cli: bound ADB MCP validation to the advertised tool (52c84f6)
• cli: cache subprocess compilation within each worker (6bcfeb0)
• cli: consolidate development runner workflow coverage (16f5ded)
• cli: consolidate duplicate setup journey (9bd7e2c)
• cli: consolidate schema coverage and assert input refusals (beb80a0)
• cli: cover package-name binary alias (40e2f94)
• clients: verify Copilot compact schema workflows (#1624) (5100a1a)
• clients: verify native Claude Code integration (#1549) (8c7569a)
• clients: verify native Claude Code integration on Windows (#1926) (c32d846), closes #1923
• clients: verify native DeepSeek Harness integration (#1524) (3059d8a)
• clients: verify native Gemini CLI integration (#1541) (b9c4398)
• clients: verify native Gemini CLI integration on Windows (#1936) (04089d5)
• clients: verify native GitHub Copilot CLI integration (#1555) (66a9ad5)
• clients: verify native Grok Build workflows (#1571) (efd81f9)
• clients: verify native OpenCode integration (#1546) (539a0f9)
• clients: verify native Qwen Pi and Hermes workflows (#1511) (b25922e)
• clients: verify Qwen Code on native Windows (#2103) (117bd23)
• cli: expose JavaScript progress workflow failure output (701519a)
• cli: follow prepared projection ownership during cancellation (#7022) (422ca5a)
• cli: keep IPC trace input under the Linux spawn limit (#5673) (c38f96f)
• cli: load only Frida contracts for focused CLI checks (eea3271)
• cli: preserve Windows runtime paths and failure diagnostics (79156e5)
• cli: reduce repeated startup and filesystem setup (d88d6c1)
• cli: remove duplicate browser discovery case (dcb0362)
• cli: remove duplicate malformed JSON assertion (5d32e42)
• cli: repair analysis-view finalization cancellation seams (#6431) (f850b7c)
• cli: repair Markdown capacity recovery coverage (#6903) (bded9c6)
• cli: retain process outcomes across workflow assertions (60242ec)
• cli: retain recovery guidance in filtered failures (#5536) (55cce6f)
• cli: retain schema selection tuple types (f19aeba)
• cli: time Kuna cleanup from producer readiness (#6944) (f9fabdf)
• cli: treat omitted exactOptional inputs as optional (5eebe2f)
• cli: verify attributed caveats in composed analysis (2819def)
• cli: verify packaged policy revocation (3d71737)
• cli: verify self-import parity and cleanup (55c9ce2)
• conformance: remove fixture generator test option (ea853ce)
• consolidate failure guards and trim unused fixture APIs (ffd9611)
• consolidate redundant assertions into boundary workflows (b71a591)
• consolidate service and process fixtures (f8a53a8)
• contracts: align catalog and admission fixtures with current contracts (1be8e96)
• contracts: align plist and UI finalization regressions (d1adc60)
• contracts: consolidate concurrent limitation fixtures (f2dfda4)
• contracts: cover validation branches (8ccdb33)
• contracts: remove duplicate tool inventories (0ae3c08)
• derive MCP SDK identity expectations (ab4193c)
• discovery: select the declared GDB console contract (02c5e13)
• distinguish corrected port normalization commitment (98c3d2f)
• docs: isolate README facts from CLI catalog imports (767fe0f)
• docs: keep localized claims and tool counts aligned (a7b84a9)
• docs: type README drift scenarios as fixed pairs (6e38529)
• doctor: assert platform-specific Hopper readiness and exit status (7435e79)
• doctor: retain discovered Hopper paths despite version failures (0686b07)
• doctor: separate Hopper availability and version assertions (c2b79aa)
• domain: keep rejected Evidence payloads inert (#3260) (fb752d2)
• dotnet: add managed conformance verifier (2b75fcf)
• dotnet: split managed comparison blocks (97f6678)
• dotnet: verify managed app graph manifests (5be4051)
• dotnet: verify managed app graph manifests (a5e5c68)
• dotnet: verify managed app manifests (793a948)
• electron: isolate active-hook fixture resolution (#3565) (1579b68), closes #3473
• electron: verify aliased APIs against a real IPC round trip (28bd0d9)
• eliminate fixture races and prune redundant scaffolding (#849) (f72931d)
• environment: derive capacity fixtures from current contracts (8bf882f)
• environment: read asynchronous owner observations through contracts (c5d86a1)
• environment: verify export failures through the real CLI (c324d31)
• erlang: cover lambdas names filter and chunks miss in BEAM views (#6973) (ddde727)
• eval: cover navigation and address tool routing (ba098f2)
• evaluation: find failure gate within cleanup callbacks (#6988) (9895f18)
• evaluation: grade managed agent fixture facts (#1924) (ffd8c9c)
• evaluation: include native preparation in test deadlines (#5627) (d98fc38)
• evaluation: preserve partial coverage in the Notes oracle (ab720b4)
• evidence: assert the exact cancellation reason after staging cleanup fails (#5601) (85b379c)
• evidence: cover BOM recovery across bundle commands (7685dee)
• evidence: cover workflow question whitespace normalization (#1739) (b2da21a)
• evidence: retain structured input issues through cleanup owners (1849a82)
• evm: verify real worker cancellation and cleanup recovery (#2404) (ae80513)
• evm: verify static descriptor bindings before use (#2427) (4f4f6cd)
• exercise source test selection through Git and Vitest (25711ad)
• extract shared fixtures, drop knip carve-outs (#627) (55e5eb0)
• filesystem: assert admission cancellation provenance (3bd9aa3), closes #4610
• filesystem: bound FIFO regressions at consumers (0bfb6e0)
• filesystem: exercise digest cancellation and admission ownership (cd9252b)
• filesystem: probe actual permission denial before host assertions (d0375a1)
• firmware: assert cleanup provenance through composed failures (5eaef92)
• firmware: bind owned producers and exercise real limits (3ba1942)
• firmware: stream hashes of sparse oversize fixtures (7375ab6)
• flutter: assert canonical unsupported profile error code (5a099ef)
• frida: pass the signal to finalization listeners (88bb8d5)
• ghidra: align Java probe fixtures with raw output (f22e8e7)
• ghidra: align MIPS verifier ABI and snapshot expectations (a40ee74)
• ghidra: allow rollback tests to reach spawned process (d761d73)
• ghidra: construct exact import policy targets (9ecf48b)
• ghidra: decouple stopped signal regression from recovery prose (d7efb40)
• ghidra: distinguish descriptor failure origin from callback tagging (b7c1d79)
• ghidra: distinguish stopped signal evidence from OOM attribution (488c21a)
• ghidra: group exit-signal evidence controls (1dff1b1)
• ghidra: isolate source admission failure sessions (b225765)
• ghidra: isolate start failure from stop evidence (0ba81bd)
• ghidra: own fixed import target fixtures (b03a15e)
• ghidra: preserve address alias restoration failures (#3060) (4190630), closes #2924
• ghidra: preserve metadata in interior-label fixture (926c2d6)
• ghidra: preserve Node heap options in adapter verification (#1550) (2d99e1e)
• ghidra: preserve selected verification resource limits (1c3766a)
• ghidra: require pending multi-HI16 coverage in the real MIPS relocatable lane (#1974) (eaf88ac)
• ghidra: restore complete installation fixtures across CI boundaries (18d56f5)
• ghidra: retain endpoint failure ownership facts (e6f2525)
• ghidra: share result projection client setup (ea1dbda)
• ghidra: size oversized annotations for canonical delivery (1e34197)
• ghidra: use host-native absolute session root fixtures (1e83d27)
• give oversized registration groups semantic owners (a3eae6e)
• go: assert unresolved MZ candidate boundary (ce48f43)
• graph: narrow summary owner and complete PE fixture facts (80bb0b4)
• group boundary registration by observed behavior (9877ab7)
• harden verification fixtures and runtime coverage (4d4631a)
• hopper: add semantic runtime conformance (da1da3b)
• hopper: align startup fixtures with cleanup and lease contracts (b3dec00)
• hopper: avoid scheduler-sensitive exit timing (6e6827c)
• hopper: bind string assertions to observed source extents (02987d8)
• hopper: cover real boundary failures and CLI parity (64717ad)
• hopper: cover verified Linux rejection (db202c2)
• hopper: fix fixture context and cleanup assumptions (cd740a6)
• hopper: name regex search assertion accurately (9240bd8)
• hopper: remove brittle diagnostic source assertion (40bf55b)
• hopper: remove dossier identity assertion (b5c0b5b)
• hopper: repair Linux demo setup and native verification (#2638) (141d209)
• hopper: retry after cancelled startup (6de726f)
• hopper: synchronize startup cancellation with launcher readiness (#662) (88a3c3f)
• hopper: verify alternate Linux launcher path (d93257b)
• hopper: verify external exit recovery and retained ownership (d2a53be)
• hopper: verify real boundaries and prune redundant happy paths (7005166)
• http3: add real MITM capture verification lab (#1997) (ebaaa79)
• ida: align native search fixtures with Unicode folding (#6898) (3787ec5)
• ida: expect direction in combined call coverage (4dd44dd)
• ida: place capability composition at provider boundary (0adcd83)
• ida: preserve exact optional resource method shape (f33ab9b)
• ida: preserve physical workspace traversal controls (85292fd)
• ida: remove readiness fixture override after refusal (ec0259d)
• ida: verify typed timeout and retained cleanup through the CLI (bb49252)
• identity: defer live MCP integration proof (74db3fc)
• il2cpp: retain refusal for uncovered registration tails (0f07810)
• inherit root options in Vitest projects (168100e)
• investigation: prove multi-version fixture closure (5184816)
• isolate host discovery and update current capture fixtures (bfd76c5)
• isolate module mocks without changing test groups (673a659)
• isolate slow filesystem and CLI suites (c2e134b)
• javascript: align public fixtures with proven source facts (934f538)
• javascript: align semantic fixtures with runtime context (59553c7)
• javascript: assert the shared cancellation contract (a6b9312)
• javascript: bind parameterized workflows to CLI fixtures (463c499)
• javascript: bound route scan work independently of timing (#7016) (cc7cc81)
• javascript: classify artifact workflows as boundary tests (dc303a8)
• javascript: consolidate module lookup regressions (#2031) (783fcb0)
• javascript: consolidate source analysis and export regressions (f517a5a)
• javascript: cover plain long-line loader identities (#1025) (984fc27)
• javascript: cover primitive spread changes through CLI and MCP (cad14f3)
• javascript: cover returned object scaling (b973b1b)
• javascript: distinguish resolver URLs from existing module targets (80d4a74)
• javascript: distinguish selected paths from artifact identity (b44cb5b)
• javascript: execute the registered Webpack export fixture (#6951) (d87e73f)
• javascript: exercise candidate endpoints through the worker (eb00112), closes #3128
• javascript: expect the invalid input_path code in the streamed CLI failure test (d186ca7)
• javascript: expect unknown parameter provenance (e05d339)
• javascript: expose subsequent analysis recovery errors (fb9f35c)
• javascript: preserve authenticated filesystem coverage facts (aeeb4b7)
• javascript: preserve exact empty property keys in declarations (b4502be)
• javascript: preserve fixture runtime context for path analysis (c3ad8fc)
• javascript: preserve module and renderer fixture authority (5502a56)
• javascript: remove duplicate escaped-receiver cases (9ffc621)
• javascript: retain resource ownership in deep-return fixture (#1644) (32d13c4)
• javascript: retain valid unknown endpoint coverage shape (dfafc04)
• javascript: reuse comparison node fixtures (66863b6)
• javascript: run native type bindings with compiled boundary prerequisites (7e9fb6f)
• javascript: separate heap pressure from graph admission proof (84c89d1)
• javascript: separate map format and row-limit failures (6b56ba2)
• javascript: separate option ownership and capture scenarios (6ed96f4)
• javascript: share primitive expansion producer fixtures (c867bcd)
• javascript: share semantic graph fixtures (#1631) (be44b50)
• javascript: share semantic graph test facts (ac356c4)
• javascript: supply source graph to native handoff checks (b5d83d2)
• javascript: synchronize worker cleanup and validate candidate facts (5b5de1b)
• javascript: verify CommonJS file URL boundaries via CLI and MCP (#2061) (6ce5903)
• javascript: verify distinct module origins through reconstruction (96b2b24)
• javascript: verify endpoint certainty through CLI and MCP (9319644)
• javascript: verify escaped receivers through CLI and MCP (f9ce32b)
• javascript: verify Windows path case and load scope (#2635) (2f3dee3)
• json: remove assertions covered by CLI output consumers (a959a83)
• keep package setup verification read-only (acaf030)
• kuna: preserve caller and producer graph failure context (5b24399)
• kuna: separate composed doctor startup from cancellation timing (7b2087e)
• kuna: wait for probe readiness within command deadline (4643844)
• lifecycle: align cleanup fixtures with owned resource contracts (54a663d)
• lifecycle: isolate provider cleanup ownership fixtures (c6104d5)
• lifecycle: target owned finalization boundaries (fcd5192)
• linux: verify setup through CLI and MCP (67504d2)
• macho: frame load commands beyond the target probe (f1dc595)
• managed: align source goldens with metadata validation (5a5bcb6), closes #6650
• managed: assert large issue retention without full-array diffs (dac544b)
• managed: bound capacity fixtures with reserved budgets (693a385)
• managed: include shared dossier fixture in artifact inputs (66a20a2)
• managed: preserve field-access owner identities (007f0d2)
• managed: preserve token identity in graph assertions (592c46b)
• managed: retain derived facts in cloned method fixtures (40717c9)
• managed: retain observed target changes across member remaps (0f04043)
• managed: scope cleanup failures to snapshot reads (f4179f5)
• managed: split edge comparison scenarios by semantics (8ad3e0e)
• managed: use the current attribute fixture contract (6407718)
• managed: verify complete fixture resources and references (29d3dcb), closes #2585 #2583
• mcp: align completion checks with provider readiness (fe4b94a)
• mcp: align workflow assertions with current guidance (f8bb113)
• mcp: avoid exact prose in retained native view discovery (1d2b26e)
• mcp: avoid unrelated validator compilation in availability checks (9a44fea)
• mcp: await observed EOF before releasing startup (d1fdaaf)
• mcp: consolidate catalog inventory checks (3afcd64)
• mcp: consolidate fixture connection and cleanup ownership (d68d03e)
• mcp: consolidate SDK schema checks and scenario ports (9c3479e)
• mcp: cover navigation errors and source-map cancellation (dc6872c)
• mcp: cover strict compact wire contracts (8de25d0)
• mcp: derive sessionless managed inventory (cab7c4a)
• mcp: fix three MCP boundary suites on native Windows (#2312) (a97b713)
• mcp: isolate target-free sessions from host provider discovery (28f5761)
• mcp: preserve coverage in unchanged function fixtures (3ee6ff4)
• mcp: preserve typed input refusal and finalization contracts (27976a8)
• mcp: read bundle failures from public error content (69c3b32)
• mcp: read typed errors in canonical Evidence regressions (fd46cff)
• mcp: ready providers before live prompt completion checks (#2137) (621cee1), closes #2123
• mcp: remove arbitrary schema inventory thresholds (24673aa)
• mcp: remove cache and event order dependence from fault probes (b8510ee)
• mcp: retain distinct Objective-C class observations (ccc7da3)
• mcp: retain uncertainty for empty capped IDA reference pages (ccd7486)
• mcp: reuse advertised schema in inventory check (#2469) (a6efa4f)
• mcp: reuse immutable schema validators within analysis view suite (3d3ee83)
• mcp: serialize real process capture and report unavailable authority (8f9da25)
• mcp: stabilize lazy-loading verification (7157ab0)
• mcp: validate defaults at tool boundary (21241d2)
• mcp: validate public error diagnostics in acceptance workflows (09058eb)
• mcp: verify availability after cancelled session restoration (102c5a3)
• mcp: verify recovery before reading retained views (#7029) (bc9efc9)
• mcp: verify recovery guidance through initialized clients (33d00a0)
• mcp: verify retained Interface Builder limits (11d38cb)
• mips: distinguish damaged ELF admission from partial ABI evidence (ac6e0e2)
• mips: project inspected ABI facts without undefined overrides (360ced2)
• mobile: preserve encrypted bundle path facts across adapters (f3269fe)
• native: align plist fixtures with selected source validation (7f70797)
• native: assert batch identity in production registration (933fcb3)
• native: assert failed-callee call identities and edge caps (#2888) (7cdf8bc)
• native: bind origin comparison to containing entries (7e8c786)
• native: build the .app fixture executable with a complete Mach-O header (facaae8)
• native: distinguish plist validation from conversion (dd198d0)
• native: distinguish qualified symbol identity controls (aa521d4)
• native: preserve admitted identity and partial boundary facts (64f261b)
• native: replay complete dylib-use provider output (89f5e48), closes #1970
• native: retain trace diagnostics when observed hits differ (048b798)
• native: share Swift context in vtable fixture admission (c394fb1)
• native: skip the DMG EACCES diagnostic as root (#1584) (262efe6)
• native: skip the EACCES directory diagnostic as root (#1394) (40d9c7b)
• native: skip the inaccessible-directory diagnostic as root (#1900) (d0edeec)
• native: stabilize resource-limited binary layout controls (e385504)
• native: validate demangling through owned contracts (60c0880)
• native: verify macOS provenance through real CLI and MCP (ce16f7b)
• native: verify real PE and DOS entry views (1770f38)
• overhaul deterministic suite architecture (48053d1)
• overhaul deterministic suite architecture (513d9b1)
• package: align setup preflight contract (b33ebb1)
• package: cover aligned setup plan (a597639)
• package: cover config symlink lifecycle (d1ef7a5)
• package: join owned updater after registry fixture failure (cb689fa)
• package: preserve unrelated symlink config (c50e51e)
• package: preserve unsupported host verification (977119f)
• package: prove artifact cleanup and identity (9522adf)
• package: select the intended Hopper smoke-test provider (fab33a6)
• package: share validated native dossier fixtures (ca90109)
• package: stabilize fake Hopper ownership (0b70131)
• package: verify npx upgrade on published releases (7b6f7be)
• package: verify npx upgrade on published releases (1f8ad7b)
• parse Electron listing Evidence before comparison (c0e35c2)
• paths: pin Windows separator normalization before native admission (#4733) (f85a932), closes #4707
• pcap: align timestamp oracle with the provider locale (edfd502)
• pcap: retain exact output and release injected cleanup failures (1341e8c)
• pcap: run the missing-path refusal only where captures are admitted (#2510) (1991542)
• pcap: verify timestamps through the named summary contract (e2db768)
• pcap: verify UTC metadata against authored capture records (d205c52)
• pe: bind acceptance calls to advertised MCP definitions (c76edbe)
• perf: distinguish Codex tool context and token accounting (#2416) (ee87111)
• perf: evaluate larger and non-HTTP packet workflows (#3232) (ca7450b)
• perf: measure genuine SAZ selection and retained recovery (#3584) (357996c)
• perf: measure real sigrok annotation selection workflows (ca1b2f8)
• perf: observe owned counters at payload completion (ca2d15b)
• perf: preserve negative small-PCAP workflow measurements (#2640) (c7105d9)
• perf: reuse keyed archive CLI and MCP sessions (1a808dd)
• perf: verify authentic retained investigation queries (#4814) (47d3c6b)
• perf: verify existing SQLite column selection on QGIS data (#2489) (45984a4)
• prefer structured assertions over recovery prose (#6379) (bea6b98)
• process: align root admission fixture with observer allocation ownership (b227c30)
• process: assert canonical admission failure through cleanup envelopes (81727c3)
• process: bind capture watchdog cleanup to test lifetime (f69332c)
• process: check malformed capture choices concurrently (6020a0b)
• process: check malformed capture choices concurrently (48de11c)
• process: compare progress with retained PTY chunks (2886cc1)
• process: cover argv rewrites in native ownership inspection (09d7b9b)
• process: distinguish native preparation from capture allocation (dc936f4)
• process: distinguish native startup from producer verification (9a70fb4)
• process: expose unavailable capture and unexpected teardown failures (90b06db)
• process: isolate child startup and assert cleanup recovery values (3e87889)
• process: prepare SDK validation before cancellation timing (3cd80cb)
• process: preserve terminal deadline expiry regression (#2055) (2320ac2)
• process: print the progress frames when the sparse-child bound fails (#6427) (21b836a)
• process: publish capture readiness atomically (74be526)
• process: publish compiler readiness atomically and verify native identity (3afec59)
• process: report cleanup details on cancellation failures (79d5b9a)
• process: report the cause of terminal capture failures (8a4c4b6)
• process: retain cancellation checks under unverified host cleanup (9a5b077)
• process: retire native caches at worker teardown (a0784c0)
• process: serialize real CLI capture boundaries (82560eb)
• process: share lineage fixtures to restore the duplication gate (08f4ba9)
• process: use deterministic hang fixture (ba15d16)
• process: use owned CLI and workspace fixtures (4940a86)
• process: use owned host-aware settlement fixtures (9b7ec80)
• process: wait for observable snapshot ctime changes (#999) (161ed91)
• prompts: isolate capture admission regression (2451e18)
• providers: assert runtime and snapshot ownership contracts (60bb202)
• providers: correct executable and retained-owner expectations (f0e8699)
• providers: preserve cleanup and uncertainty contracts (46a5f55)
• providers: verify framing through client socket boundaries (1fd1989)
• prune redundant cases and promote configuration lifecycle coverage (5945915)
• prune redundant conformance checks and document test priorities (aafdf8a)
• prune resource-recovery wording assertions (ae06dcf)
• pyinstaller: distinguish path and metadata allowance failures (fc11134)
• pyinstaller: encode PYZ list length correctly (66e25e7), closes #6676
• pyinstaller: match interned name producer encoding (72270ac), closes #6676
• pyinstaller: use an absolute drive path for refusal coverage (afc72f3)
• reconstruction: copy readonly citations for matcher input (6c4313b)
• reconstruction: declare authored function symbol identity (5ddd7dc)
• reconstruction: declare complete comparison fixture facets (#2964) (7a6defa)
• reconstruction: isolate derived surface ownership in fixtures (63370e9)
• reduce test suite runtime (2223da1)
• reference-source: avoid filesystem enumeration order assumptions (e62e925)
• reference: cover failure normalization (3d5041f)
• reference: preserve optional resolver identity regressions (#6913) (f8ff157)
• reference: scope cleanup faults to the owned source file (#2430) (eeba618)
• release: accept guarded npm publishing (b7bc855)
• release: keep credits attached to their contribution (a99857d)
• release: type patched history options before runtime setup (18451e4)
• release: validate only the selected preflight job (747e729)
• remove duplicate export schema acceptance (b783e7f)
• remove duplicate result assertions before throwing guards (a1b7d40)
• remove duplicate workflow examples and self assertions (d6d1cd2)
• remove module and timestamp assumptions from boundary fixtures (#1621) (a761981)
• remove obsolete schema version assertions (fe342fa)
• remove stale limits and handoff expectations (acf33d6)
• remove vacuous and duplicate assertions (56e2bf7)
• remove Vitest config test exports (d6e545c)
• repair remaining bulk-merge regression fixtures (#6375) (7091be2)
• replace brittle workflow and readme checks (b3529aa)
• replace implementation lock-in with behavioural assertions (#498) (7ee3f23)
• replay: remove duplicate schema coverage (4ec2343)
• replay: use portable seam executables (3183f47)
• require retained authority and successful empty-child updates (3472cc4)
• resolve script paths from file URLs with fileURLToPath on Windows (#3266) (f8f3593)
• retain direct hash cleanup retainer contract (2d06992)
• retain focused CommonJS export regressions (a99b2fd)
• reuse application analysis across comparison directions (044c0a9)
• reuse Frida SDK setup across status scenarios (5feac72)
• reuse identical JavaScript analysis fixtures (42951bb)
• reuse stdio MCP server in acceptance file (9ce6ef8)
• reuse validators for identical MCP schemas (85ccef3)
• rizin: own fake provider cleanup in shared fixtures (#3735) (40f73f6)
• rizin: register terminal admission at provider boundary (658c29c)
• runtime: cover idempotent handler cleanup (1bdb59e)
• rust: verify CLI retries exact descriptor cleanup (a817016)
• search: pin native Unicode substring matching (9a37802), closes #6634
• serialize subprocess-heavy integrations (f46fc7f)
• session: acquire provider before mixed cleanup recovery (1e53933)
• session: preserve live binding after cancelled switches (1136ea8)
• session: reopen replaced target through MCP (1c32880)
• setup: align boundary assertions with owned contracts (4d22c83)
• setup: assert invalid DSH override inspection results (800454c)
• setup: assert registration facts through their owner (6b3eee1)
• setup: cover configuration identity regressions (abb54ce)
• setup: cover later clients after failure (8f73112)
• setup: isolate client fixtures across host platforms (f73bb0f)
• setup: isolate multi-client recovery from skill admission (4d88e4f)
• setup: isolate registration checks from installed providers (0e62094)
• setup: isolate registration failure recovery intent (794932e)
• setup: retain Hermes policies across registration refresh (bff03bf)
• setup: scope removal regression to its fixture client (fe48e77)
• setup: simplify prewarm fixture ownership (2acdd54)
• setup: use native Windows launcher in layered OpenCode fixture (#4947) (afde435)
• setup: use verified invocations in uninstall fixtures (a154b97)
• share Frida SDK connection setup within fixtures (162b9e5)
• share native keyed archive integer fixture generation (847a1a3)
• share repeated boundary preambles to restore the jscpd gate (#2691) (8b1549a)
• share snapshot replay and managed graph fixtures (d83cbd2)
• share the client registration command to restore the jscpd gate (#1317) (5d16be2)
• signals: verify native decoder discovery coverage (#2818) (87a8c8c)
• snapshot: author canonical native inventory rows (2968d1e)
• sourcemap: consolidate source map regressions (#2034) (83a4445)
• sourcemaps: assert semantic evidence and actual output admission (bd74c7a)
• sourcemaps: verify shared nested map admission (ee0ad17)
• sqlite: keep incomplete cleanup primary over late cancellation (#5365) (465e1a1)
• sqlite: preserve worker failures through cleanup retry (21a2030)
• stabilize artifact pagination coverage (f56bdde)
• stabilize subprocess-heavy integration suites (a556e94)
• stabilize worker cancellation and trailer regressions (#5497) (e52a716)
• strengthen archive and resource cleanup assertions (5ba1642)
• strengthen MCP prompt acceptance coverage (05fb9b1)
• strengthen public input and module lookup controls (b7f563e)
• uninstall: cover backups that fail verification after copying (967a8bc)
• uninstall: verify current recovery snapshots through the CLI (9a95db6)
• update: isolate CLI command deadlines (4c20744)
• update: isolate CLI subprocess deadlines (#5019) (4c20744)
• validate evidence and select fixtures structurally (33f90f9)
• verification: strengthen conformance and real-Hopper checks (0d36976)
• verifiers: assert shared command diagnostics and identity (#7002) (347b6e4)
• verifiers: retire superseded source-loading regression (7984506)
• verify assertion contracts and the production evaluation gate (be698d4)
• wasm: place parsed interface comparison at provider boundary (c25ee58)
• web: align manifest path errors with artifact ownership (#7021) (397aa62)
• web: cover nullable HTTP captures through CDP and CLI (#1834) (5d12a0b)
• web: remove duplicate path schema cases (b5b7301)
• windows: hold sharing conflict through first close attempt (94d9bff)
• windows: verify native addon in a renamed Node host (59b4a3c)
• windows: verify retained inspection ownership after rename (#2902) (6a7f70f)
• workflows: verify residual questions in CLI snapshots (770d2f6)

Continuous Integration

• balance test shards and reuse package download caches (40b37ae)
• bound core job execution time (9f3f392)
• consolidate macOS native baseline checks (#935) (810fe53)
• docs: render documentation in the selected docs lane (91f06f5)
• document deterministic suite ownership (3c42403)
• enforce architecture guards with portable checkout paths (ecc67ca)
• enforce conventional pull request titles (07a0b98)
• enforce conventional pull request titles (3a21f16)
• finish main validation and balance complete test costs (f0f0995)
• fix PR metadata triggers and defer expensive runner work (3af8f84)
• ghidra: add Windows P0 acceptance and real-engine lanes (0b35510)
• ghidra: compile the packaged bridge source cohort (#3142) (1b828db)
• keep npm download caches from Turbo snapshot growth (#5655) (9d8e780)
• keep validation fresh and preserve failed-shard reports (#2210) (428eee0)
• narrow native-host lane selection and reuse build caches (#2131) (4f46eac)
• observe affected-owner test plans against full results (fa0a9b2)
• parallelize native verification and share test artifacts (91f6840)
• pin Cutter actions and guard workflow-only changes (#4199) (3406dc4)
• pin GitHub Actions to full commit SHAs (#1901) (c6503ed)
• raise duplication threshold to 3.5 percent (11f1d95)
• raise duplication threshold to 4 percent (9bea4d1)
• re-run the suite after the main-branch shard flake (40f632a)
• re-run the suite on the corrected main checkpoint (e17290c)
• reduce macOS runner contention (3f4ea32)
• reduce redundant compatibility and qualification work (d13c9f8)
• reduce reporter fan-out and preserve shard history (ab02f3c)
• remove redundant typecheck, lint, and format compatibility jobs (eb27f01)
• remove redundant typecheck, lint, and format compatibility jobs (aeb5cb3)
• remove release check trigger (c9bd91d)
• reuse current-run builds across provider lanes (490a285)
• reuse portable build cache in native package jobs (8fa1175)
• reuse portable Turbo outputs across verification runs (a00c34d)
• run signature target binding regressions on native macOS (#1107) (1e63144)
• scope provider and native verification by changed inputs (#1660) (66c344e)
• scope timing helpers to portable verification (c8d861f)
• select semantic tests and fixture lanes for their guarded inputs (#1675) (b212e92)
• separate fast feedback from full qualification (0c7f4df)
• shard coverage tests and skip docs-only suites (c736317)
• shard coverage tests and skip docs-only suites (fa58082)
• split fast and deep static checks (#5634) (0add6a5)
• summarize static checks and retain complete reports (#2242) (d96550f)
• trigger release checks (e698c97)
• validate initial PR readiness declarations (#3302) (5f0065c)
• verify installed package with Linux Hopper (4f97f69)
• verify native arm64 and Intel macOS workflows (#898) (4801a24)
• verify runtime observation and readiness (9349ff5)
• website: allow explicitly requested Pages-only publication (796b65e)
• website: allow explicitly requested Pages-only publication (864160d)
• website: allow explicitly requested Pages-only publication (#1205) (796b65e)
• website: publish Cloudflare and Pages from one artifact (761881c)
• windows: run environment registration regressions (#5409) (aa314ab)
• windows: run remaining Windows-only path admission cases in the lane (#5807) (3dde9a5)

---

This PR was generated with Release Please. See documentation.