morluto f8f52f205a fix(python): preserve marshal names and packaged bytecode ...

Use one marshal surrogatepass decoder for PYZ directories and Python bytecode.
Validate ordinary UTF-8 spans with the native fatal decoder, preserving BOMs,
lone surrogates, raw bytes and marshal reference slots.

Distinguish legacy full-pyc CArchive modules from modern marshal-only modules
before reconstructing headers. Share typed source/codec failures between stream
output and completion while retaining native-read drain and cleanup ownership.

Validated focused producer, reader, lifecycle, CLI and MCP regressions, plus
public inventory/extraction of CPython 3.14-generated marshal tables and code.
No packaged application was executed. Document original versus derived bytes.

Fixes #6800
Fixes #6789

2026-10-24 01:24:43 +08:00

..

.vitepress

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

assets

docs: keep license sections text-only

2026-10-10 00:09:46 +08:00

design

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

readme

fix(runtime): align remaining Node security pins and setup guidance (#6316)

2026-10-23 11:03:03 +00:00

releases

chore(release/6.7.0): release rea-agents 6.7.0 (#4983)

2026-10-18 15:40:45 +08:00

specs

perf(environment): decode only selected replay query values

2026-10-24 00:14:15 +08:00

verification

feat(cli): report version and runtime with an explicit output format (#6530)

2026-10-24 00:06:03 +08:00

adb-device-analysis.md

fix(adb): count Unicode requested permissions

2026-10-23 19:07:45 +08:00

agent-environments.md

fix(parsers): preserve format boundaries and query occurrence identity

2026-10-23 22:01:16 +08:00

android-analysis.md

fix(parsers): preserve format evidence and caller input identity

2026-10-23 22:54:28 +08:00

apk-signature.md

fix(apk): read constructed BER signer signatures

2026-10-23 19:07:45 +08:00

apktool-resource-analysis.md

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

apple-application-analysis.md

fix(parsers): preserve format boundaries and query occurrence identity

2026-10-23 22:01:16 +08:00

architecture.mermaid

feat(apk): inspect signing declarations with retained fact queries

2026-10-22 11:48:09 +00:00

binary-diagnostics.md

fix(parsers): retain independent facts and boundary identity

2026-10-23 22:18:43 +08:00

browser-observation.md

fix(browser): retain unknown resource sizes and accessibility roles

2026-10-23 23:36:21 +08:00

browser-scenario-contract.md

fix(browser): ignore scenario storage enumeration order (#5035)

2026-10-23 02:26:41 +08:00

ci-analysis.md

docs(ci): add a repeatable static analysis example (#6496)

2026-10-23 23:42:58 +09:00

cli.md

fix(reference): preserve raw symlink target identity

2026-10-24 00:11:41 +08:00

client-configuration.md

docs: clarify evidence applicability and boundary limitations

2026-10-24 01:18:46 +08:00

client-verification.md

perf(mcp)!: default to compact input schema advertisements (#5975)

2026-10-22 00:17:11 +08:00

desktop-applications.md

docs(desktop): list all supported IL2CPP metadata versions

2026-10-24 00:11:41 +08:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

fix(browser): preserve frame identity across captures (#4040)

2026-10-23 17:19:35 +08:00

elf-notes.md

fix(parsers): preserve format evidence and caller input identity

2026-10-23 22:54:28 +08:00

erlang-beam.md

fix(beam): accept bytes after declared form

2026-10-23 21:28:10 +08:00

error-contract.schema.json

fix(mcp): guide agents through tool error recovery (#5470)

2026-10-20 21:45:05 +08:00

evm-bytecode.md

fix(evm): reject nested duplicate CBOR map keys

2026-10-23 23:49:26 +08:00

firmware-analysis.md

docs(firmware): document the Windows Unblob submodule checkout (#6464)

2026-10-23 18:15:00 +08:00

flutter-analysis.md

fix(flutter): preserve short GNU build IDs through public workflows

2026-10-24 00:11:41 +08:00

frida-instrumentation.md

fix(providers): name JEB, IDA, and one-shot command deadlines (#6014)

2026-10-22 04:01:02 +08:00

ghidra-dos.md

docs: clarify evidence ownership and verification guidance

2026-10-23 17:13:00 +08:00

ghidra-mips.md

fix(ghidra): reconcile GNU MIPS ABI declarations

2026-10-14 14:47:26 +08:00

ghidra-nativeaot.md

fix(ghidra): use resolved type addresses for NativeAOT metadata

2026-10-15 21:05:33 +08:00

ghidra-ppc.md

feat(ghidra): admit 32-bit big-endian PowerPC ELF (#1747)

2026-10-14 06:35:55 +08:00

ghidra-provider.md

perf(ghidra): aggregate binary overview at the provider boundary (#4754)

2026-10-17 10:44:24 +00:00

ghidra-psp.md

feat(ghidra): admit bounded PSP ELF through installed Allegrex (#1599)

2026-10-11 19:47:33 +08:00

ghidra-riscv.md

feat(ghidra): support raw NMOS 6502 analysis (#2079)

2026-10-13 21:13:01 +08:00

go-binaries.md

fix(parsers): respect container facts and real decoding boundaries

2026-10-23 23:02:07 +08:00

godot-pck.md

fix(parsers): respect container facts and real decoding boundaries

2026-10-23 23:02:07 +08:00

gpu-code-objects.md

fix(native): retain processor, hidden-slice and property type facts

2026-10-24 01:00:14 +08:00

harmony-analysis.md

fix(harmony): exclude raw resources from manifests

2026-10-23 19:18:47 +08:00

http3-capture-lab.md

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

ida-provider.md

fix(providers): name JEB, IDA, and one-shot command deadlines (#6014)

2026-10-22 04:01:02 +08:00

il2cpp-metadata.md

fix(il2cpp): decode valid shared-suffix string offsets

2026-10-24 00:27:57 +08:00

index.md

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

installation.md

docs: clarify evidence applicability and boundary limitations

2026-10-24 01:18:46 +08:00

javascript-application-graph.md

feat(managed): project call and field-access edges into the application graph (#6260)

2026-10-22 00:26:56 -07:00

javascript-application-workflows.md

docs: clarify evidence applicability and boundary limitations

2026-10-24 01:18:46 +08:00

javascript-artifact-reconstruction.md

docs: clarify evidence applicability and boundary limitations

2026-10-24 01:18:46 +08:00

javascript-recovery.md

fix(javascript): name heap and semantic ceilings (#6022)

2026-10-22 02:44:14 +08:00

javascript-route-inventory.md

fix(javascript): preserve Next filesystem route spelling

2026-10-24 00:11:41 +08:00

javascript-runtime-observation.md

fix(inspector): preserve script identity and parse-failure facts

2026-10-23 16:49:31 +08:00

javascript-runtime-reconciliation.md

fix(javascript): keep encoded URL slashes inside one runtime path segment (#6259)

2026-10-22 00:26:12 -07:00

jeb-analysis.md

docs(limits): describe how to design admission recovery (#6368)

2026-10-23 05:10:36 +08:00

kuna-provider.md

feat(process): make the regex worker heap request configurable (#6301)

2026-10-22 23:43:13 +08:00

managed-code-analysis.md

fix(managed): retain nested names and ReadyToRun observations

2026-10-24 00:11:41 +08:00

mcp-contracts.md

docs: clarify evidence applicability and boundary limitations

2026-10-24 01:18:46 +08:00

mcp-prompts.md

fix(mcp): preserve procedure aliases and complete name ambiguity

2026-10-19 08:54:23 +08:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

model-artifacts.md

fix(model): accept released GGUF writer metadata and vocab-only output

2026-10-23 23:36:21 +08:00

native-function-matching.md

feat(native): match retained function inventories across builds (#5390)

2026-10-20 09:48:52 +00:00

native-investigation.md

fix(native): retain processor, hidden-slice and property type facts

2026-10-24 01:00:14 +08:00

packet-captures.md

fix(captures): preserve canonical TShark alias fields

2026-10-23 19:07:46 +08:00

pcap-analysis.md

fix(pcap): retain UTF-8 decoding failures across tool output

2026-10-24 00:11:41 +08:00

pe-certificates.md

fix(parsers): preserve format boundaries and query occurrence identity

2026-10-23 22:01:16 +08:00

process-capture.md

fix(process): preserve sibling path identities

2026-10-23 18:07:45 +08:00

python-packaged-applications.md

fix(python): preserve marshal names and packaged bytecode

2026-10-24 01:24:43 +08:00

python-pyc.md

fix(python): compare code objects without inline caches

2026-10-23 18:31:56 +08:00

raw-binary.md

feat(ghidra): support raw big-endian m68k analysis (#4018)

2026-10-16 23:57:34 +08:00

reconstruction-coverage.md

fix(reconstruction): require comparable cited Evidence for coverage

2026-10-15 18:39:57 +08:00

reconstruction-obligation-ledgers.md

docs: clarify evidence applicability and boundary limitations

2026-10-24 01:18:46 +08:00

reconstruction-readiness.md

docs(readiness): align required stage identifier and checks with evaluator (#2200)

2026-10-13 00:15:54 +08:00

recorded-crashes.md

fix(process): settle native exit and repair ownership verification (#5249)

2026-10-20 02:01:00 +08:00

releasing.md

fix(release): isolate npm publication from dependency execution (#6681)

2026-10-23 12:27:24 +00:00

reverse-engineering-tools.md

fix(gdb): wait for the outer console command to finish

2026-10-23 19:18:47 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

fix(rust): separate section storage from compressed stream admission

2026-10-24 01:00:14 +08:00

signal-recordings.md

fix(parsers): preserve format evidence and caller input identity

2026-10-23 22:54:28 +08:00

sqlite-databases.md

fix(sqlite): preserve catalog byte identity and worker context

2026-10-24 01:00:14 +08:00

testing.md

docs: clarify evidence applicability and boundary limitations

2026-10-24 01:18:46 +08:00

tool-design.md

docs: clarify evidence applicability and boundary limitations

2026-10-24 01:18:46 +08:00

user-visible-errors.csv

docs: clarify evidence applicability and boundary limitations

2026-10-24 01:18:46 +08:00

wasm-artifacts.md

fix(wasm): preserve core inspection with optional metadata warnings

2026-10-24 00:30:34 +08:00

web-network-captures.md

fix(parsers): retain independent facts and boundary identity

2026-10-23 22:18:43 +08:00

web-runtime.md

fix(browser): name web-bundle budgets and recover web deadlines (#6036)

2026-10-22 05:47:38 +08:00

web-source-location.md

fix(javascript): preserve map boundaries and loader provenance

2026-10-24 01:00:14 +08:00

website-module-trace.md

feat(browser): trace captured website module imports (#879)

2026-10-07 14:59:52 +08:00

website-script-export.md

fix(browser): preserve body API provenance through script export

2026-10-12 14:12:19 +08:00

windows-ghidra-p0.md

fix(runtime)!: require patched Node.js security releases (#6315)

2026-10-23 07:21:50 +00:00