morluto 5d6029ea62 fix(apple): derive launchd domains from owning directories ...

Use the matched Contents/Library/LaunchAgents or LaunchDaemons suffix to
select a plist's domain. Remove the independent scan of every ancestor.
Keep regular-file, application-root, sidecar and suffix admission rules.

Adapt @bnkaiteam's proposal and ZIP boundary regression from PR #3504,
adding public CLI/stdio MCP controls for nested bundles, case variants,
misleading ancestors and excluded paths.

Validation: 53 focused checks, build, check:fast and docs:check pass.
Two new controls fail before the fix. 12 completed actual built CLI cost
controls preserve the ordinary reply and projection ID byte for byte.
No heavy profiling, target or real deep-provider execution; npm release
and whole-agent costs remain unverified.

Fixes #3353

2026-10-17 20:10:12 +08:00

..

acceptance

fix(apple): derive launchd domains from owning directories

2026-10-17 20:10:12 +08:00

boundary

fix(apple): derive launchd domains from owning directories

2026-10-17 20:10:12 +08:00

composition

fix(ida): refuse universal Mach-O targets in attached profiles (#4765)

2026-10-17 04:27:46 -07:00

conformance

fix(managed): verify Mach-O ABI-prefixed exports exactly (#3974)

2026-10-17 00:21:36 +08:00

evaluation

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

fixtures

fix(native): validate NativeAOT PE virtual ownership

2026-10-17 19:02:29 +08:00

process-global

fix(verifiers): read packed bridge without extraction

2026-10-17 10:35:31 +00:00

support

perf(tests): reuse MCP connections within source matrices

2026-10-17 09:11:22 +00:00

ciTestSequencer.ts

ci: finish main validation and balance complete test costs

2026-10-13 18:54:05 +08:00

processOwnershipRunner.ts

test(process): retire native caches at worker teardown

2026-10-09 04:12:49 +08:00