morluto 6ba6aea5eb fix(parsers): respect container facts and real decoding boundaries ...

Use zip.js's parsed symlink fact for inventory and open refusal. Treat an
unmatched Godot trailer as an unconfirmed candidate while preserving failures
for confirmed malformed packs. Report entropy path-resolution failures at the
selected-input boundary.

Separate Go header discovery from inline string extents in ELF and Mach-O,
and apply the aggregate content allowance after validating real source ranges.
Normalize binary plist UID widths through the existing scalar-copy owner,
budget exact clone growth, preserve source identity, and refuse inexact UIDs.

Validation: 389 distinct tests passed, one Linux /proc test skipped on Darwin;
build, typecheck/lint, docs, single-thread formatting, and discovery (2142 files)
passed. CLI/MCP Go fixtures and public ZIP/Godot/keyed-archive workflows ran.
Real producer prevalence and external provider execution were not established.

Repeated ordinary keyed-archive CLI inventory facts and estimated reply tokens
were equal before/after. Warm median elapsed was 0.5166s / 0.5177s; no speed claim.

Fixes #6751
Fixes #6763
Fixes #6754
Fixes #6767
Fixes #6762
Fixes #6779

2026-10-23 23:02:07 +08:00

..

.vitepress

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

assets

…

design

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

readme

fix(runtime): align remaining Node security pins and setup guidance (#6316)

2026-10-23 11:03:03 +00:00

releases

chore(release/6.7.0): release rea-agents 6.7.0 (#4983)

2026-10-18 15:40:45 +08:00

specs

fix(runtime): align remaining Node security pins and setup guidance (#6316)

2026-10-23 11:03:03 +00:00

verification

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

adb-device-analysis.md

fix(adb): count Unicode requested permissions

2026-10-23 19:07:45 +08:00

agent-environments.md

fix(parsers): preserve format boundaries and query occurrence identity

2026-10-23 22:01:16 +08:00

android-analysis.md

fix(parsers): preserve format evidence and caller input identity

2026-10-23 22:54:28 +08:00

apk-signature.md

fix(apk): read constructed BER signer signatures

2026-10-23 19:07:45 +08:00

apktool-resource-analysis.md

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

apple-application-analysis.md

fix(parsers): preserve format boundaries and query occurrence identity

2026-10-23 22:01:16 +08:00

architecture.mermaid

feat(apk): inspect signing declarations with retained fact queries

2026-10-22 11:48:09 +00:00

binary-diagnostics.md

fix(parsers): retain independent facts and boundary identity

2026-10-23 22:18:43 +08:00

browser-observation.md

docs(browser): clarify parser evidence contracts

2026-10-23 18:07:46 +08:00

browser-scenario-contract.md

fix(browser): ignore scenario storage enumeration order (#5035)

2026-10-23 02:26:41 +08:00

ci-analysis.md

docs(ci): add a repeatable static analysis example (#6496)

2026-10-23 23:42:58 +09:00

cli.md

docs(ci): add a repeatable static analysis example (#6496)

2026-10-23 23:42:58 +09:00

client-configuration.md

fix(setup): tell MSIX Claude Desktop's process view from any private roaming file (#4903)

2026-10-23 02:27:18 +08:00

client-verification.md

perf(mcp)!: default to compact input schema advertisements (#5975)

2026-10-22 00:17:11 +08:00

desktop-applications.md

style(desktop): format GameMaker probe coverage

2026-10-23 19:30:13 +08:00

electron-fuses.md

…

electron-observation.md

fix(browser): preserve frame identity across captures (#4040)

2026-10-23 17:19:35 +08:00

elf-notes.md

fix(parsers): preserve format evidence and caller input identity

2026-10-23 22:54:28 +08:00

erlang-beam.md

fix(beam): accept bytes after declared form

2026-10-23 21:28:10 +08:00

error-contract.schema.json

fix(mcp): guide agents through tool error recovery (#5470)

2026-10-20 21:45:05 +08:00

evm-bytecode.md

fix(parsers): retain independent facts and boundary identity

2026-10-23 22:18:43 +08:00

firmware-analysis.md

docs(firmware): document the Windows Unblob submodule checkout (#6464)

2026-10-23 18:15:00 +08:00

flutter-analysis.md

fix(flutter): select reported ABI labels through shared contracts

2026-10-19 18:38:57 +08:00

frida-instrumentation.md

fix(providers): name JEB, IDA, and one-shot command deadlines (#6014)

2026-10-22 04:01:02 +08:00

ghidra-dos.md

docs: clarify evidence ownership and verification guidance

2026-10-23 17:13:00 +08:00

ghidra-mips.md

fix(ghidra): reconcile GNU MIPS ABI declarations

2026-10-14 14:47:26 +08:00

ghidra-nativeaot.md

fix(ghidra): use resolved type addresses for NativeAOT metadata

2026-10-15 21:05:33 +08:00

ghidra-ppc.md

…

ghidra-provider.md

perf(ghidra): aggregate binary overview at the provider boundary (#4754)

2026-10-17 10:44:24 +00:00

ghidra-psp.md

…

ghidra-riscv.md

…

go-binaries.md

fix(parsers): respect container facts and real decoding boundaries

2026-10-23 23:02:07 +08:00

godot-pck.md

fix(parsers): respect container facts and real decoding boundaries

2026-10-23 23:02:07 +08:00

gpu-code-objects.md

fix(parsers): retain independent facts and boundary identity

2026-10-23 22:18:43 +08:00

harmony-analysis.md

fix(harmony): exclude raw resources from manifests

2026-10-23 19:18:47 +08:00

http3-capture-lab.md

…

ida-provider.md

fix(providers): name JEB, IDA, and one-shot command deadlines (#6014)

2026-10-22 04:01:02 +08:00

il2cpp-metadata.md

fix(parsers): retain independent facts and boundary identity

2026-10-23 22:18:43 +08:00

index.md

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

installation.md

fix(doctor): check only the current platform's Hopper launcher candidates (#6253)

2026-10-23 23:41:54 +09:00

javascript-application-graph.md

feat(managed): project call and field-access edges into the application graph (#6260)

2026-10-22 00:26:56 -07:00

javascript-application-workflows.md

fix(javascript): drop built-in effects for visibly replaced globals (#4565)

2026-10-23 02:28:53 +08:00

javascript-artifact-reconstruction.md

fix(artifacts): preserve raw directory name identity

2026-10-23 21:28:10 +08:00

javascript-recovery.md

fix(javascript): name heap and semantic ceilings (#6022)

2026-10-22 02:44:14 +08:00

javascript-route-inventory.md

feat(javascript): retain queryable static route inventories (#6019)

2026-10-22 16:54:14 +08:00

javascript-runtime-observation.md

fix(inspector): preserve script identity and parse-failure facts

2026-10-23 16:49:31 +08:00

javascript-runtime-reconciliation.md

fix(javascript): keep encoded URL slashes inside one runtime path segment (#6259)

2026-10-22 00:26:12 -07:00

jeb-analysis.md

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

kuna-provider.md

feat(process): make the regex worker heap request configurable (#6301)

2026-10-22 23:43:13 +08:00

managed-code-analysis.md

fix(managed): retain unknown catch identity beside observed name changes

2026-10-23 21:28:11 +08:00

mcp-contracts.md

fix(pyinstaller): retain colliding archive observations

2026-10-23 21:28:10 +08:00

mcp-prompts.md

fix(mcp): preserve procedure aliases and complete name ambiguity

2026-10-19 08:54:23 +08:00

migration-6.2.md

…

model-artifacts.md

fix(model): retain parsed headers when hashing is interrupted

2026-10-23 21:28:10 +08:00

native-function-matching.md

feat(native): match retained function inventories across builds (#5390)

2026-10-20 09:48:52 +00:00

native-investigation.md

fix(parsers): respect container facts and real decoding boundaries

2026-10-23 23:02:07 +08:00

packet-captures.md

fix(captures): preserve canonical TShark alias fields

2026-10-23 19:07:46 +08:00

pcap-analysis.md

fix(pcap): retain absolute HTTP request targets

2026-10-23 19:07:46 +08:00

pe-certificates.md

fix(parsers): preserve format boundaries and query occurrence identity

2026-10-23 22:01:16 +08:00

process-capture.md

fix(process): preserve sibling path identities

2026-10-23 18:07:45 +08:00

python-packaged-applications.md

fix(parsers): preserve format evidence and caller input identity

2026-10-23 22:54:28 +08:00

python-pyc.md

fix(python): compare code objects without inline caches

2026-10-23 18:31:56 +08:00

raw-binary.md

feat(ghidra): support raw big-endian m68k analysis (#4018)

2026-10-16 23:57:34 +08:00

reconstruction-coverage.md

fix(reconstruction): require comparable cited Evidence for coverage

2026-10-15 18:39:57 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction)!: summarize obligation ledgers by cited Evidence authority (#5875)

2026-10-21 05:12:55 -07:00

reconstruction-readiness.md

…

recorded-crashes.md

fix(process): settle native exit and repair ownership verification (#5249)

2026-10-20 02:01:00 +08:00

releasing.md

fix(release): isolate npm publication from dependency execution (#6681)

2026-10-23 12:27:24 +00:00

reverse-engineering-tools.md

fix(gdb): wait for the outer console command to finish

2026-10-23 19:18:47 +08:00

roadmap.md

…

rust-binaries.md

fix(parsers): retain independent facts and boundary identity

2026-10-23 22:18:43 +08:00

signal-recordings.md

fix(parsers): preserve format evidence and caller input identity

2026-10-23 22:54:28 +08:00

sqlite-databases.md

fix(parsers): preserve format evidence and caller input identity

2026-10-23 22:54:28 +08:00

testing.md

docs: clarify parser authority and compatibility evidence

2026-10-23 18:25:11 +08:00

tool-design.md

docs: clarify parser authority and compatibility evidence

2026-10-23 18:25:11 +08:00

user-visible-errors.csv

fix(entropy): name offset when the byte window starts past EOF (#6495)

2026-10-23 23:42:07 +09:00

wasm-artifacts.md

feat(wasm): make command deadlines adjustable with recovery guidance (#5798)

2026-10-21 15:00:05 +08:00

web-network-captures.md

fix(parsers): retain independent facts and boundary identity

2026-10-23 22:18:43 +08:00

web-runtime.md

fix(browser): name web-bundle budgets and recover web deadlines (#6036)

2026-10-22 05:47:38 +08:00

web-source-location.md

fix(parsers): preserve format boundaries and query occurrence identity

2026-10-23 22:01:16 +08:00

website-module-trace.md

…

website-script-export.md

…

windows-ghidra-p0.md

fix(runtime)!: require patched Node.js security releases (#6315)

2026-10-23 07:21:50 +00:00