rea/release-notes.md

🤖 I have created a release beep boop

6.9.0 (2026-11-08)

⚠ BREAKING CHANGES

• ghidra: qualify memory effect coverage (#8651)
• ghidra: Byte search results require skipped_overlays; loaded overlays no longer appear in skipped_not_loaded. The Ghidra profile changes so prior snapshots are not replayed.
• ghidra: identify containing code and data (#8777)
• native: recognize identical function evidence (#8442)
• ghidra: Ghidra snapshots made before the search projection profile revision no longer match. Run fresh analysis and save a new snapshot.
• qualify call paths by provider discovery (#8443)
• Strict clients that cached the previous full inspect_address_context output schema must refresh tools/list and accept the typed error field on unavailable facets.
• mcp: The opt-in hot-cold catalog no longer preloads inspect_analysis_view. Discover it before calling it, batch with its producer when needed, or use the unchanged default full profile.
• native: preserve value-flow absence semantics (#8785)
• ghidra: Ghidra analysis snapshots from earlier byte-search policies are refused; reopen the target and create a new snapshot. Historical Evidence remains importable.
• mcp: distinguish unavailable batch pseudocode (#8737)
• Snapshot-shaped bundle import failures use invalid_request rather than evidence_integrity_mismatch.
• browser: hosts where Chromium cannot create its sandbox, such as root users and Linux containers without user namespaces or a setuid sandbox, now fail to launch until REA_BROWSER_NO_SANDBOX=true is set.
• analysis-view: distinguish unavailable native collections (#8291)
• objdump: preserve unknown executable identity (#8824)
• kuna: separate verification policy from analysis identity (#8699)
• Strict clients that cached the previous full inspect_address_context output schema must refresh tools/list and accept the typed error field on unavailable facets.
• evidence: validate native view parent predicates (#8451)
• preserve feature traces when owner lookup is unavailable (#8368)
• investigation: close_binary retains investigation records. Use reset_investigation to clear them. Cross-process recovery requires an explicitly acknowledged Evidence bundle checkpoint.
• comparison: preserve same-entry correspondence across renames (#8263)
• native: report NativeAOT failures as reason codes (#8053)
• evidence: report storage publication limits (#7887)
• javascript: preserve operator influence in semantic traces (#7939)
• managed: show readable type names in member signatures (#5309)
• mcp: MCP tool arguments now default to 1,024 combined array elements and object members per call. Select a larger positive finite REA_MCP_MAX_INPUT_ELEMENTS allowance and restart for larger inline inputs, or use retained/file selectors where supported. Inputs are never truncated.
• certificates: disclose undecoded unsigned attributes (#7920)
• native: own Mach-O load commands in binary reader (#7952)
• environment: attribute source errors to caller fields (#7900)
• cli: refuse lossy text output (#7852)
• adb: report local filesystem admission failures (#7885)
• evidence: distinguish inline records from bundles (#7895)
• cli: preserve native value input diagnostics (#7889)
• javascript: report ambiguous artifact paths (#7864)
• environment: Environment state and coverage can report method-replay for non-GET safe reads; exhaustive reason consumers must handle it.
• web: retain invalid browser selection (#7903)
• ghidra: Ghidra now returns not-in-listing for in-memory addresses without listed instructions or defined data. Consumers matching the former undecodable value must handle the new status.
• input: classify unresolvable source paths (#7847)
• session: classify unavailable snapshot prerequisites (#7837)
• process: reject unsupported one-column terminals (#7848)
• process: sensitive interaction data is empty with sensitive and input_bytes fields instead of a byte-count placeholder. Sensitive raw_data is also redacted. Read input_bytes and recapture both comparison sides when migrating older private-input Evidence.
• setup: managed MCP registrations use the selected absolute runtime and REA entry script, including package-runner cache paths. Keep that installation available or restore it before setup; unknown registrations require confirmed manual repair. Setup no longer returns prewarm or emits its progress events.
• hopper: macOS Hopper launches refuse double quotes, backslashes and line breaks in final helper paths or arguments before application handoff. Select literal-safe launcher/runtime/database paths and loader arguments, or a compatible provider. Original executable names can remain unchanged when their prepared image path is literal-safe.
• javascript: consolidate renderer and route ownership
• ownership: Replace Cutter --json=true or --json=false with --json-output=true or --json-output=false. Bare --json still controls CLI result formatting.
• ownership: rea compare-bundles has been removed. Use rea compare instead. The MCP compare_bundles tool is unchanged.
• jeb: JEB engine refusals now report execution_failure rather than unsupported_target. Consumers should inspect the retained upstream diagnostics for the engine's reason and recovery facts.
• artifacts: ASAR file occurrences may now contain unpacked: false. Consumers that validate only true must accept an optional boolean; absent historical fields remain unknown.
• environment: The write-plan reason can now be unknown-clock; strict clients must accept the new output value.
• mcp: non-loopback deployments require MCP_ALLOWED_HOSTS or rea mcp --http --allowed-hosts; bundle names must be unchanged HTTP hostnames within the 63-octet DNS label bound.
• mcp: binary_session {} no longer returns analysis_provider_candidates[].availability.diagnostics, target_support.diagnostics or capabilities, or tool_availability group surface, effects and annotations. Pass {"detail": "complete"} to get them.

Features

• android: apply caller-selected R8 mapping evidence (#7456) (03f17cf)
• android: expose selected manifest component declarations (#7379) (7e8f7f6)
• android: link native declarations to static JNI candidates (#7472) (570abe9)
• android: trace callers of external DEX methods (#8154) (0ffed7a)
• api-contract: inspect local GraphQL SDL and field references (#9140) (5303199)
• artifacts: add U-Boot legacy uImage reader (part of #7129) (#7234) (18a8e71)
• artifacts: compare inventories from Evidence sources (#7869) (37827af)
• artifacts: inspect and extract .NET single-file bundles (#3787) (22cab82)
• artifacts: inspect and extract Bun standalone module graphs (#6998) (8188497)
• artifacts: inspect classic iNES container regions (#2816) (22e5aa9)
• artifacts: inventory and extract ESP flash layouts (#8228) (e6d0618)
• artifacts: inventory and extract ESP32 firmware images (#7498) (64196b0)
• artifacts: inventory and extract Intel HEX and Motorola S-record regions (#7136) (c369719)
• artifacts: inventory and extract U-Boot FIT images (#7771) (d39b300)
• artifacts: inventory and extract UF2 and DfuSe firmware containers (#8230) (b43c329)
• artifacts: read Godot 3 PCK version 1 archives (#7781) (09225b0)
• artifacts: read UnityFS AssetBundle containers (#7699) (e78ac1a)
• artifacts: read WeChat mini-program wxapkg containers (#8148) (5990ff0)
• artifacts: read Zstandard ZIP members (#7780) (fc24b08)
• artifacts: select extraction entries and output destination (#4031) (ad518cf)
• binary-layout: admit ELF64 AArch64 and name the refused host (#8711) (6442ea0)
• browser: import saved Playwright v10 trace evidence (#9127) (985b9ea)
• browser: retain compact scenario summaries and selected views (#7120) (fc43e28)
• browser: reuse saved response values across scenario steps (#7267) (3fcbabe)
• cli: add CSV and TSV analysis views (#7254) (aa6f643)
• cli: expose caller-selected reference-source path exclusions (#2630) (996977e)
• cli: report opt-in command timings (#7042) (d3b31a0)
• cli: validate browser scenarios offline (#7343) (d109a39)
• contracts: inventory offline OpenAPI operation declarations (#9104) (91d73a1)
• debugger: share GDB and Rizin session caps as REA_ settings (#8056) (4a8d8f7)
• desktop: capture and export apps installed from a downloaded .deb (#8954) (970969c)
• desktop: capture, draft, export and witness a task inside a build computer (#9045) (c5301e6)
• desktop: keep an agentenv computer up and drive it through REA's MCP tools (#9041) (fc4c381)
• desktop: pick seed and end by checkpoint, and keep the capture host out of bundles (#9037) (c363f3e)
• desktop: read XML with a plain DOCTYPE, and check an element's whole text (#9050) (ac23dc8)
• desktop: suggest managed members for Unity script assemblies (#5511) (abc647b)
• dotnet: expose field constant defaults (#8015) (1ddee10)
• electron: report custom URL protocol registrations (47fa6ab)
• elf: decode Linux core dump process and memory mapping notes (#8830) (e75d1c7)
• environment: serve query numbers, counted values and made objects (#7332) (40b9c03)
• environment: serve sorted creates, listed references and toggles (#7600) (51ad845)
• environment: serve the writes callers make without recorded form fields (#7260) (7bc6c5b)
• environment: serve the writes that later reads explain (#7274) (aa210b7)
• environment: serve writes whose calls send different members (#7539) (131fbe0)
• evidence: aggregate exact retained comparison references (#8267) (d9e01e5)
• evidence: discover missing Evidence links without transferring records (#8633) (710fad8)
• evidence: read selected complete records without the whole bundle (#8528) (eb39a07)
• ghidra: admit DOS MZ targets on Windows P0 (#7144) (1cc979c)
• ghidra: admit RISC-V ilp32 ELF with a derived calling convention (#8229) (e669365)
• ghidra: checkpoint owned Programs across sessions (c07ab4b)
• ghidra: identify containing code and data (#8777) (015a02d)
• ghidra: reuse existing projects through verified copies (#7236) (1944751)
• guidance: distinguish focused matches from broad parent sections (#8305) (41e7333)
• guidance: search installed workflow sections (#6996) (c88e1b0)
• harmony: disclose the unread pkgContextInfo.json declaration (#9096) (c7b0e0d)
• harmony: disclose unclassified inventory files (#4968) (848f165)
• investigation: retain records across engine cleanup (#8361) (f72638f)
• javascript: compare static endpoints with HAR captures (#9090) (3708538)
• javascript: discover semantic call literals in feature traces (#7840) (f9e7571)
• javascript: page retained feature traces through analysis views (#8522) (423059a)
• kuna: allow independent decompile retries (#8793) (81c0988)
• kuna: preserve stored pointer references (#8851) (f7dc548)
• kuna: verify release 1.986 and guide version selection (#8187) (245a581)
• kuna: verify release 1.988 (#8509) (1d343a8)
• kuna: verify release 1.990 (#8813) (f8f9095)
• macho: report per-slice encryption status in inspect_macho (#5359) (860fdd8)
• managed: filter and project retained member views (#7968) (cf9f010)
• managed: show readable type names in member signatures (c9bf6a9)
• managed: show readable type names in member signatures (#5309) (c9bf6a9)
• mcp: guide agents from argument-name mistakes in procedure and search tools (#2146) (#8649) (7e9cf83)
• mcp: page retained incoming reference addresses (#8591) (55078b9)
• mcp: page retained instruction references (#8594) (71f680d)
• mcp: refresh provider candidates without switching (#8487) (0b028cc)
• mcp: report provider release verification in session (#8485) (aa2c1c6)
• mcp: scope advertised tools by family (#7228) (b675073)
• mcp: support compact output schema advertisements (#7218) (9085222)
• native: deliver batch decompile as a retained summary (#8631) (93b8b82)
• native: label binary overview counts with their inventory scope (#8338) (d2518a1)
• native: make function matching allowance configurable (#7159) (b8ce3c7)
• native: open extension, framework, XPC and plug-in bundle directories (#8117) (37342ec)
• native: page retained feature traces (#8585) (f1622fc)
• native: page retained load-image observations (#7134) (f69c52a)
• native: page retained observations and source context (#7146) (4c8647a)
• native: page retained procedure references (#8588) (b81da90)
• native: report binary hardening for ELF, PE and Mach-O (#8524) (560674e)
• native: retain decompile export source facts (#8805) (b970238)
• native: retain LLDB source coordinates and verify Pascal calls (#2800) (3e8a5f7)
• native: retry failed directory decompiles independently (#8811) (e47bb15)
• native: select retained batch decompile results through analysis views (#8629) (dec8d2d)
• page recorded Evidence arrays (#8863) (b40b0b8)
• plugins: make Claude Code and Codex installs self-contained (#7514) (0cd7ef4)
• process: add a non-executing dry run to capture_process_scenario (#8469) (6c08320)
• python: qualify a recognized 3.14/3.15 pyc header (#8927) (fe9797b)
• rizin: select the decoder and map address for one-shot commands (#8991) (81f9f71)
• setup: register LM Studio during setup (#8611) (398eb0d)
• setup: support CodeBuddy as a setup client (#2492) (fb841a9)
• skills: build a computer-app environment from a request (#9049) (03a3fcb)
• web: page retained bundle endpoint observations and inferences (#7259) (6d5532a)
• website: publish agent discovery and Markdown responses (eef8f44)
• workflows: expose guided prompts through CLI and MCP (#6995) (5ae7765)

Bug Fixes

• adb: admit completed path probes after daemon startup (#8858) (33e0bf1)
• adb: align CLI selector schemas with canonical inputs (#7722) (3142f7b)
• adb: list devices adb reports with bare no-permissions text (#8905) (b28b1e0)
• adb: preserve process names and pin fixture interpreters (ab44487)
• adb: preserve selected environment through provider execution (b7e76a5)
• adb: report local filesystem admission failures (#7885) (a001231)
• adb: retain output on command failures (6de6099)
• adb: separate unresolvable paths and host capacity in adb spawn failures (#6188) (92f3326)
• adb: validate screen capture PNG headers (#7962) (f7cd4e5)
• adb: verify pushes to long device paths (#8047) (1da304b)
• analysis-view: distinguish unavailable native collections (#8291) (b1b6cb6)
• analysis-view: keep inferred confidence on views of inferred Evidence (#8099) (bfa082f), closes #8098
• analysis: interpret provider and ELF inputs once (248133d)
• analysis: preserve bookmark address uncertainty (2b85a4a)
• analysis: preserve failure and cleanup outcomes (d815367)
• analysis: retain source evidence through directory exports (#7250) (5508b2a)
• analysis: validate native UI seed addresses (2733979)
• android: ignore action-less filters in activity export defaults (#8030) (d857b61)
• android: preserve manifest component spelling (#7818) (af1ccb6)
• android: retain selected Java across workspace launches (1a1121c)
• apk: classify fixed inspection allowances as nonretryable (#7784) (ac545ad)
• apk: explain unknown signer comparison (#7927) (66f5b65)
• apk: match signer serials by signed integer identity (#7205) (921225d)
• apk: reuse canonical subject identity in retained views (d3946a3)
• apktool: read Apktool 2.9+ metadata in its line-oriented dialect (#7747) (33698e6)
• apple: charge the XML plist decoder's DOM before decoding (#8115) (cce3314)
• apple: derive NIB hierarchy from observed relationships (3052a06)
• apple: preserve bounded archive diagnostics (#7890) (fd297b1)
• apple: preserve exact integer precision with post-table plist objects (#8910) (281dbc8)
• apple: preserve own artifact metadata through schema projection (fef76a0)
• apple: preserve post-table plist objects (#7820) (675c73f)
• apple: read flattened framework Info.plist from Resources (#8101) (6d19649), closes #8100
• apple: recognize AppKit cell ownership (#7916) (f256492)
• apple: scope application roots to the inventory format (#7714) (b594fbc)
• apple: validate JVM interface identity (cd7a0ee)
• apple: validate keyed archive selectors consistently (#7728) (6a226bd)
• artifacts: admit raw UDRW disk images (#7106) (0eb3919)
• artifacts: admit selected app bundle traversal (f878266)
• artifacts: bind operations to admitted sources (2dd2ffc)
• artifacts: classify bundle executables by their own name (#7365) (066a234)
• artifacts: classify selected package names (c27560e)
• artifacts: compare ASAR storage declarations (60834e3)
• artifacts: compare Node SEA member declarations (e891926)
• artifacts: complete positional reads across short results (d54f5b0)
• artifacts: decide how compare_artifacts compares every format_metadata kind (#8231) (c13dd36)
• artifacts: deduplicate keyed archive selector choices (8a47cbb)
• artifacts: distinguish incomplete PyInstaller probes (abc1351)
• artifacts: explain recovery for existing DMG attachments (#7221) (4767970)
• artifacts: extract readable inventoried entries (#7827) (2dd9a30)
• artifacts: give Godot PCK and Node SEA readers the ESP member lifecycle (#8395) (0a99c2a)
• artifacts: guide retries for symlinked files (#8725) (85be0f7)
• artifacts: handle early ASAR extraction cancellation (#5672) (1f14d64)
• artifacts: keep inventorying an ASAR whose member declares an invalid size (#8719) (61bb02d)
• artifacts: name every U-Boot uImage type in the pinned image.h (#8007) (95637a3)
• artifacts: preserve cancellation during inventory cleanup (5cd61aa)
• artifacts: preserve completed caller reads through finalization (939009f)
• artifacts: preserve known metadata without content hashes (#7932) (62ce357)
• artifacts: preserve mounted DMG traversal coverage (650873e)
• artifacts: preserve selected ASAR companion paths (779d548)
• artifacts: preserve source and coverage facts (59a70ad)
• artifacts: reject inventory counts beyond manifest (8dc4421)
• artifacts: report required bytes for ASAR header limits (#7452) (f251009)
• artifacts: report ZIP Zstd window refusals as resource limits (fdc4e39)
• artifacts: resolve historical retained summaries (7f65617)
• artifacts: retain archive streams and source receipts (f1535a1)
• artifacts: retain reader work through cleanup (5da50ab)
• artifacts: retain selected keyed archive paths (90475ec)
• artifacts: retain source identity failures after relocation (2012efe)
• artifacts: settle transient DMG verification within its deadline (f3e5b33)
• artifacts: split U-Boot script uImages on their size table (#7805) (f19436c)
• artifacts: unify selected path failure classification (413f24b)
• artifacts: validate bundle resource target identity (f061989)
• artifacts: validate directory source spelling (5d30f82)
• artifacts: validate partial inventory edges (b7cae1a)
• artifacts: validate partial inventory root identity (d1c88fa)
• artifacts: validate selected path traversal (f3a301e)
• asar: disclose unverified block integrity (4e86bd0)
• asar: preserve header filename identity (84a54b6)
• asar: retain unsupported integrity declarations (1008d5e)
• asn1: reject non-minimal OID subidentifiers (#7800) (b14b94f)
• browser: accept 3-digit HTTP response status codes up to 999 (#8075) (d0d31fc)
• browser: advance storage pages by examined rows (83bbad2)
• browser: centralize CDP network event facts (99ff434)
• browser: clarify shared source-map output budget (#9154) (128f7c3)
• browser: deduplicate scenario coverage guidance (#7933) (611c30c)
• browser: disclose opaque redirect coverage gaps (#7943) (0179d94)
• browser: enforce initial navigation default deadline (#7934) (42d5425)
• browser: ignore repeated CSP directives within one policy (#7798) (6fd5d34)
• browser: invalidate ASAR headers on file state changes (38ed5a3)
• browser: isolate unrepresentable script export paths (e23cb3b)
• browser: keep negative script columns Chrome reports (#8684) (8db538a)
• browser: keep opaque cookie partitions unaligned (#7203) (6749bd0)
• browser: keep the Chromium sandbox for REA-launched browsers (#8738) (30a11af)
• browser: normalize discovery wire facts at the shared boundary (#7204) (1cd8259)
• browser: parse HTTP Link whitespace correctly (b989e3c)
• browser: preserve comparison evidence identity (76441ed)
• browser: preserve discovery identity ambiguity (4e33bd3)
• browser: preserve DOM length units in captures and comparisons (#7971) (50b2ab1)
• browser: preserve event coverage for failed requests (#8158) (69bf61f)
• browser: preserve external defaults during CDP attachment (#7188) (c6893d1)
• browser: preserve frame tree root identity (#7915) (9b45462)
• browser: preserve prefixed XHTML link hints (#7819) (7dbebb4)
• browser: preserve request and cleanup failures (72cc2d3)
• browser: preserve script exports with filesystem-unrepresentable paths (#7526) (e23cb3b)
• browser: preserve source-map declaration uncertainty (#7945) (1ef5918)
• browser: preserve unknown CDP source coordinates (#7842) (685f6db)
• browser: preserve unknown WebMCP comparison facts (#7833) (cc5a406)
• browser: redact scenario cleanup diagnostics (3a65ef0)
• browser: redact startup cleanup diagnostics (3233992)
• browser: reject inexact storage values (15a8f68)
• browser: reject invalid UTF-8 in HTTP CDP discovery (#4524) (095a51c)
• browser: report an out-of-range generated position as a selection fault (#7133) (a9febab), closes #7132
• browser: report non-absolute export paths at their input field (#7097) (097cd2c)
• browser: resolve JSON pointers through array elements (443d077)
• browser: respect response metadata grammars (82d3ab7)
• browser: retain ambiguous scenario request identity (7ba1d01)
• browser: retain cancellation after failed worker stop (df8c90d)
• browser: retain evidence across cleanup errors (8f89454)
• browser: retain launch failure diagnostics (#7826) (44331d0)
• browser: retain prior-hop response facts in session timelines (#7807) (4b0ff68)
• browser: save from gzip, deflate and cached responses within a bound (#7361) (5fcf0d2)
• browser: share admitted accessibility identities (0a9d92a)
• browser: share media type interpretation (3021646)
• browser: unify CDP frame and document identity facts (3b4c910)
• browser: unify script and context attribution facts (8ced814)
• browser: unify worker target admission across capture workflows (a5ad164)
• browser: validate basic credential usernames (781eb1b)
• build: explain unsupported source loader runtimes (#7839) (0759fb9)
• call-path: reject incompatible coordinate mappings (#7930) (a4bd924)
• capture: bound preview headlines by source format (#7832) (0a272d5)
• captures: admit browser-serialized HAR request URLs (#8112) (c5f50e8)
• captures: classify unresolvable capture paths as capture_path input (#7814) (027c768)
• captures: exclude normalized native numeric values (#7764) (f483eab)
• captures: preserve cleanup ownership and sensitive evidence (347494f)
• captures: preserve relative redirect URL evidence (99d4ea9)
• captures: preserve reply failures through descriptor finalization (dec4cf5)
• certificates: disclose undecoded unsigned attributes (#7920) (33d6975)
• certificates: unify OID decoding and validate reports (79b8219)
• changed-behavior: withhold equality for unknowns and contradictions (#7624) (e109431), closes #7384 #7383
• ci: align static checks and regression fixtures with current contracts (#7349) (1201c25)
• ci: align tests with current evidence contracts (ec34109)
• ci: await website worker tests and format Wrangler config (9ebbe67)
• ci: consolidate shared timer limit export (ebfef27)
• ci: consume owned command failure output in verifiers (#9334) (c818ca9)
• ci: enforce architecture guards before dependency setup (#8027) (cac6e06)
• ci: include hidden VitePress configuration in CodeQL (#8486) (e5e0dc5)
• ci: own source-map captures and honor browser startup budget (9031adf)
• ci: preserve lint diagnostics without source locations (b45a833)
• ci: preserve release proposal overflow notes (2cb2969)
• ci: preserve the package verifier HTTP boundary (#8483) (7174635)
• ci: register standalone function bundle verifier (#9332) (2ac8578)
• ci: remove undeclared dependency and handle PTY chunks (3c05b4d)
• ci: remove unused exports that fail deep static checks (#8095) (6b68fb6)
• ci: repair native fixture and unused export (429355c)
• ci: repair verifier fixtures and formatting failures (00c4f44)
• ci: restore qualification and reduce validation overhead (6eb37a7)
• ci: reuse shared JavaScript AST child traversal (afc1813)
• ci: validate static evidence through receipt owner (af9bc3a)
• cli: advertise domain constraints for selector and path options (#9181) (b31fc5d)
• cli: align ADB directory and package query schemas (#8974) (1dc83b1)
• cli: attribute keyed archive errors to archive argument (#7731) (3b24249)
• cli: correct completion options and setup guidance (#7851) (60ab4da)
• cli: describe one-shot timeouts for an invocation whose session has ended (#8535) (85013da)
• cli: emit compact JSON validation errors for demangle-swift (#7622) (5414662)
• cli: export source Evidence for native value traces (#8297) (bd7002b)
• cli: guide analysts to typed incoming references (#8514) (6ca4e13)
• cli: guide delimited analysis view exports (#8730) (f8ec480)
• cli: honor the selected format for unknown mcp subcommands (#7802) (f1bfa1c)
• cli: honor token controls for builtin documents (#7897) (c7722c8)
• cli: keep captured source Evidence when one-shot delivery never commits (#8632) (3f4aff2)
• cli: keep marker-only Markdown paragraph facts literal (#7813) (1dc9e87), closes #7634
• cli: load Evidence record pairs from JSON files (#5129) (1902fcb)
• cli: merge mixed array filter selections (e334a13)
• cli: normalize exit status on worker cleanup failure (#8049) (#8050) (fbfb1b7)
• cli: parse environment-serve --port and --host like rea mcp --http (#7092) (0686ea6)
• cli: preserve Amp MCP registration settings (#7995) (f25d1e3)
• cli: preserve caller paths in format inspections (#7855) (419a211)
• cli: preserve literal Bash completion candidates (#9153) (fdd4aef)
• cli: preserve literal evidence in Markdown output (6d7e627)
• cli: preserve literal Markdown rendering (#7938) (e124bdf)
• cli: preserve Markdown table edge spaces (#7506) (423d190)
• cli: preserve markdown validation error cells (e416ce1)
• cli: preserve Markdown validation error cells (#7978) (e416ce1)
• cli: preserve missing-selection Markdown token windows (#7726) (0e4b806)
• cli: preserve native value input diagnostics (#7889) (76c7698)
• cli: preserve script export evidence through shared finalization (991a240)
• cli: preserve Unicode edge whitespace in Markdown tables (#8915) (08bc521)
• cli: prevent mcp discovery from registering clients (#7919) (9e1a1e7)
• cli: project nested array slices (47a8000)
• cli: protect Amp settings during default registration (#8076) (4b961e3)
• cli: publish the GPU inventory digest format in the CLI schema (#9062) (415ddb7)
• cli: recognize integrity failures with partial observations (#7836) (0747e46)
• cli: refuse lossy text output (#7852) (3a51230)
• cli: reject empty artifact command targets before resolution (#8834) (47cedcc)
• cli: reject empty Evidence file arguments (#7988) (d157560)
• cli: reject empty IPS and PE import targets before resolution (#7963) (4fbce5c), closes #7421
• cli: reject empty native and managed targets before resolution (#7956) (6db024d), closes #7436 #7404
• cli: reject empty observation duration selections (#7710) (fbb0e79)
• cli: reject malformed dry-run literals before changes (#7870) (48f5f30)
• cli: reject missing mcp add option values (#7996) (094ec5e)
• cli: reject non-decimal Android overload index tokens (#7493) (bcc6775)
• cli: reject non-decimal byte-entropy window options (#8919) (f76be69)
• cli: reject non-decimal desktop application limits (#9061) (a74ce45)
• cli: reject non-decimal guidance search limits (#9165) (9cdcdf3)
• cli: reject non-decimal integer tokens on every numeric option (#9178) (99db80a)
• cli: reject non-decimal native UI and command deadline options (#8920) (f1212b9)
• cli: reject non-decimal pyc and BEAM limit options (#9060) (6430f39)
• cli: reject non-decimal web capture deadlines (#9167) (d1103be)
• cli: reject project-scoped Amp registration (#7979) (e5f6383)
• cli: report failed browser cleanup retries (3d311d9)
• cli: report incomplete debugger cleanup as typed outcomes (#8021) (a108a1b)
• cli: report JSON Lines selection refusals as caller errors (#7124) (e06be06)
• cli: require absolute ADB device paths for file pull and push (#9048) (42aaef8)
• cli: retain committed evidence receipts on output failure (#7906) (f9acfdc)
• cli: retain JSONL parser diagnostics under token counting (#7705) (3d5c73f)
• cli: retain linked sources in function bundles (#8873) (56fb521)
• cli: retain resources from both cleanup failures (4266d32)
• cli: seal in-process Evidence before publishing (#8468) (1dd70f6)
• cli: share boolean timing argument handling (#8857) (650a459)
• cli: stop completion after the option terminator (#9064) (d3a4fc8)
• cli: stop restating schema defaults in help descriptions (#9278) (f8bb792)
• cli: validate byte queries before opening targets (#7723) (a0a1962)
• cli: validate MCP registration before side effects (#9057) (e9ea9d6)
• cli: validate outline-depth before numeric coercion (#7505) (baec375)
• comparison: preserve same-entry correspondence across renames (#8263) (6e2404b)
• config: preserve captured environments across provider launches (3864c7d)
• config: treat a blank analyzer override as absent beside an existing Ghidra project (#7923) (bbd4989), closes #7422
• contracts: advertise a v-mode portable Windows absolute-path pattern (#7152) (4557791)
• contracts: align CLI omission and native capability coverage (2b84efe)
• contracts: align live target classification with admitted facts (ace4dbf)
• contracts: align managed example MethodDef scope (#8966) (4bd58d5)
• contracts: publish portable browser request patterns (#7185) (63417bf)
• contracts: validate provider boundary facts consistently (8706068)
• correct stale provider refusal and diagnostic text (#7484) (250dc81)
• cutter: preserve bridge directory traversal (339b82e)
• debugger: let REA exit when a debugger could not be stopped (#8652) (144843c)
• debugger: retain verified detach across cleanup retries (d14f199)
• decompile: keep provider no-pseudocode facts on batch items (#8323) (da0e966)
• decompile: keep the output failure streak across external functions (#7924) (6571be6)
• decompile: name the differing resume identity (#8465) (1aa6beb), closes #8349
• decompile: preserve provider cleanup through export finalization (381004b)
• decompile: retain inventory limitations and selection (#8466) (fc20aeb)
• decompile: retain limitations across failed resume (#7913) (5082b50)
• deps: patch fast-uri, qs and HTTP/3 certifi (#7704) (e556134), closes #7700
• deps: patch Vite and isolate ASAR tooling (#9374) (08637b0)
• deps: upgrade zod without narrowing timestamp inputs (e3066c1)
• desktop: align exported XML formatting whitespace (#9020) (d774422)
• desktop: bound exported task array-index conversion (#9139) (ee2f5b9)
• desktop: charge retained rows at their measured representation (#8105) (0ce76e7)
• desktop: launch spaced REA archives and Electron apps (#9085) (8580f14)
• desktop: normalize XML attribute whitespace and line endings during seed scrubbing (#9099) (15fad0e)
• desktop: preserve exported SQLite text encoding (#9123) (f3d6f45)
• desktop: preserve nullable SQLite row identity (#8999) (aefd903)
• desktop: preserve significant keyfile value whitespace (#9077) (c92cbca)
• desktop: read bounded MZ signature evidence (df0e2f7)
• desktop: read JSON with deeply nested overwritten values (#9277) (5d21bdd)
• desktop: read SQLite state despite metadata name collisions (93ce13e)
• desktop: read the PPA key add-apt-repository writes into Signed-By (#8982) (f8356f3)
• desktop: recognise JSON scalar files with mixed-case suffixes (#9152) (2cf9c42)
• desktop: retain UTF-16 seed content after the signature (#9098) (8766bce)
• devicetree: reject duplicate node paths in Evidence (#8970) (6fceda8)
• discovery: advertise attached IDA navigation effects (#7017) (dd31958)
• discovery: carry provider repair instructions into capability discovery (#8532) (cbc6953)
• discovery: report debugger start host restrictions (#7965) (3536ea2)
• docs: drop duplicate native-inspection guide row (#7480) (d892e78), closes #7405
• docs: preserve verification reports after experiment archival (#7462) (2817d30)
• docs: restore translated offline provider ownership notes (#7964) (7ca216a)
• doctor: bound and cancel diagnostic subprocesses (52976ac)
• doctor: classify an unreadable skill identity as unknown (#7090) (79d2fc0)
• doctor: preserve Homebrew application paths (60822e0)
• doctor: report provider settings a client registration does not record (#8645) (6a0ccf7)
• doctor: retain host uncertainty and resolved Java selection (37a7c2d)
• domain: replace bare parser errors with typed codes (#8057) (b663c79)
• dotnet: reject invalid UTF-8 metadata version strings (#9156) (10407fb)
• dotnet: retain malformed method body diagnostics (e99b6c2)
• electron: keep literal IPC sends ambiguous beside unresolved handlers (#8120) (81378ef)
• electron: preserve application argv during active capture (#8492) (32c253b)
• electron: preserve runtime rejection and exception policies (#8542) (46c13b9)
• electron: preserve symlink directory requirements (a293738)
• electron: refuse linked ASAR parent declarations (c81b7ec)
• electron: reject non-directory scenario roots before launch (#8967) (97fe453)
• electron: retain selected scenario paths in evidence (9222526)
• electron: retain unknown external module ownership (#7950) (59a895a)
• electron: retain wrapped protocol handler registrations (c28d47b)
• electron: scope IPC pairing to application ownership (aa253bd)
• electron: select nested handlers by source coordinates (319fee4)
• electron: share ASAR node validation (2146cae)
• electron: share wrapped member identity parsing (c11fb48)
• elf: share section-table presence validation with notes (#7706) (c01ed78)
• elf: validate completed note coverage (3655dfd)
• enhanced: bound batch decompile input size (#5937) (585fe56)
• enhanced: restore batch input record limit (146064c)
• enhanced: stop call graph traversals at unconfirmed provider cleanup (#8516) (35ae723)
• environment: align comparison collection identity (87e2cc2)
• environment: align recorded probe chronology (4bbd879)
• environment: attribute source errors to caller fields (#7900) (5147b6e)
• environment: disclose truncated comparison differences (#7673) (f5cfe09)
• environment: ignore unsafe paging bounds (#9145) (cfa7ebb)
• environment: keep invalid recorded dates unknown (dd7a2da)
• environment: own JSON fields across capture, state and replay (e54bf10)
• environment: report recorded reads and target uncertainty (#7834) (1e088c1)
• environment: retain conflicting scenario MIME uncertainty (#8082) (72039ec)
• environment: retain ID ordering with missing clocks (#8957) (0dcb456)
• environment: separate request order from completion (19b2972)
• environment: share inline state byte admission (#7721) (b0fb51c), closes #7719
• environment: share legacy recorded-time interpretation (906f161)
• environment: share retained response declarations (4191974)
• environment: validate JSON pointer array indexes (#9147) (772d609)
• environment: withhold clock writes without an anchor (63220ed)
• erlang: respect legacy atom table layout (#7844) (d49a150)
• errors: store resource-constraint recovery as one shape (#8055) (fa1aa64)
• evidence: admit rebound APK and WASM views (ff6b3fb)
• evidence: align bundle receipts and conflict recovery (#7849) (6c205d8)
• evidence: bound malformed file field diagnostics (#8557) (1c0a02d)
• evidence: clarify unsupported view recovery (#8412) (ab9f723)
• evidence: consolidate retained view and verifier ownership (7d36d17)
• evidence: distinguish inline records from bundles (#7895) (473cfa3)
• evidence: exclude sensitive publication identities (f68064e)
• evidence: explain fixed analysis view page recovery (#7860) (fe52ea1)
• evidence: give missing retained closures actionable recovery (#8270) (b349e3c)
• evidence: include every subject format in bundles (50822e1)
• evidence: link snapshot replays to original observations (#8734) (5b82a25)
• evidence: own cached snapshot data (087acf2)
• evidence: own standalone command finalization (c4242cb)
• evidence: preserve residual unknown constraint diagnostics (#7770) (06d1247)
• evidence: preserve source and authenticated observation identity (09acf21)
• evidence: preserve view identity and cancellation outcomes (5f9f13d)
• evidence: Reject non-file destinations before overwrite advice (#7495) (ef11f77)
• evidence: report partial workflow question publication (#8848) (6df2ac1)
• evidence: report storage publication limits (#7887) (bf115be)
• evidence: retain analysis view environment (5261340)
• evidence: retain authenticated parents on cancellation (7cbf375)
• evidence: retain comparison cleanup ownership (242a0f2)
• evidence: retain malformed function observations (39c7f7e)
• evidence: retain malformed native observations (3e590e5)
• evidence: retain source and stream ownership (b6e58c2)
• evidence: separate source and presentation identity (2f27d3a)
• evidence: share queued cancellation handling (3e8923c)
• evidence: traverse large source link sets safely (#8457) (6f3f06a)
• evidence: validate native view parent predicates (#8451) (5336316)
• evidence: validate process captures before bundle export (ed6668b)
• evidence: validate retained views by semantic identity (effb796)
• evm: explain limiter configuration and access failures (#8669) (b7911b2)
• evm: retain admitted evidence through reply finalization (d77cf61)
• export: report publication cleanup failures to callers (5b292b6)
• export: retain publication and cleanup failures (47f8669)
• export: retain verification cleanup failures (6ed97a2)
• exports: preserve ELF name byte identity (14dd07e)
• filesystem: complete plist and limits probes (3ca1cc5)
• filesystem: finish executable and project span reads (a7004c7)
• filesystem: preserve undecodable symlink targets (#7935) (34577eb)
• filesystem: settle a Windows ChangeTime before recording a baseline (#8979) (a7574d4)
• filesystem: unify stable file identity checks (160648c)
• firmware: admit caller-selected source directly (c1e0f53)
• firmware: preserve report metadata before semantic validation (a7aad91)
• firmware: recommend the operation-specific engine (#8668) (510e83e)
• firmware: reject staged files cut off at the per-file limit (#4430) (064bb3f)
• firmware: retain completed command failures (ecd22c4)
• firmware: retain nested dependency diagnostics (b7be0d9)
• firmware: validate Intel HEX start-record offsets (#7806) (9ac9f91)
• fit: preserve leading U+FEFF in property strings (#8083) (d77104d)
• flutter: honor cancellation after cleanup retry (87d023d)
• flutter: read unlabeled Dart Version::String() from engines (#7232) (f59d884)
• flutter: retain snapshot cleanup ownership (6b3a081)
• frida: retain selected discovery endpoint on failure (#7892) (e03ff93)
• gdb: keep inferior-tty verification for read-only queries (#5539) (0714eba)
• gdb: keep sessions usable after an oversized stream record (#8029) (f042aaa)
• gdb: retain confirmed detach during close (5b14823)
• gdb: retain rejected shutdowns for retry (f89b03e)
• ghidra: admit newer 12.x releases as compatible builds (#6924) (0d1a454)
• ghidra: assemble the Swift verifier's unresolved-jump fixture before linking (#8325) (2d5dec2), closes #8188
• ghidra: bind existing MIPS projects to target metadata (#8605) (982e750)
• ghidra: clarify function annotation selectors (#8584) (4bb5300)
• ghidra: compare the DOS verifier's CLI window before its own rename (#8339) (d54a466), closes #8189
• ghidra: decide batch names independently of request order (#8306) (7c9ed94)
• ghidra: discover installed versioned Homebrew JDKs (#8853) (1998e65)
• ghidra: distinguish skipped overlays in byte search (#8608) (887b998)
• ghidra: distinguish unlisted instruction addresses (#7823) (bd687bb)
• ghidra: explain literal search candidate evidence (#8816) (cbd4bd4)
• ghidra: explain read-only project edit refusals (#8413) (810cebc)
• ghidra: expose bit-field base type identity (#8602) (9ef7069)
• ghidra: guide ambiguous selector recovery (#8768) (9109e6f)
• ghidra: guide packed program import recovery (#8820) (9196c30)
• ghidra: guide recovery from unresolved procedure selectors (#8470) (103684b)
• ghidra: honor current directory in PATH discovery (81adb89)
• ghidra: keep a changed existing project's refusal typed through launch (#8273) (39172ca)
• ghidra: make checkpoint workflows discoverable (#9246) (8eff651)
• ghidra: mark empty xrefs results as unresolved, not unreferenced (#8831) (d7df9df)
• ghidra: match startup-timeout guidance to the project mode (#8114) (ca7d1c3), closes #3751
• ghidra: omit duplicate load-image result (#7777) (a965cba)
• ghidra: preserve configured seed path traversal (01d6a95)
• ghidra: preserve facts in inventory searches (#8376) (c06b536)
• ghidra: preserve project access failures (6979c58)
• ghidra: qualify memory effect coverage (#8651) (c5ed046)
• ghidra: qualify selected project call coverage (#8391) (1a0e2c7)
• ghidra: reject uncommitted handshake reports before the first query (#8630) (aba56df), closes #8612
• ghidra: report a missing existing-project program as a configuration error (#8222) (1dc97d8)
• ghidra: report restricted-host temp write denial on Windows (#8889) (08a923f)
• ghidra: report selected project identity failures (#8379) (2d16a40)
• ghidra: report unbacked file-offset addresses without schema repair (#8308) (c287a73)
• ghidra: report unusable existing-project selections as REA_GHIDRA_PROJECT_PATH configuration errors (#7922) (32b3722), closes #7417 #7416
• ghidra: require Windows cleanup ownership (a6a69ec)
• ghidra: respect Java Unix socket path limits (#8382) (f912a68)
• ghidra: retain relocation symbol observations (#8531) (df25bc8)
• ghidra: scope rejected-input diagnostics to their request (#7140) (6381aa0)
• ghidra: search adjacent initialized memory blocks (#8840) (dd4b83c)
• ghidra: unify Unicode literal search semantics (0d1d6e8)
• ghidra: update the host no-return probe for the current bridge (#8462) (1df7ac9)
• gpu: distinguish ELF string scan limits from corruption (#8955) (8e3d794)
• gpu: preserve omitted metadata in projected views (dfe6aaf)
• gpu: retain AMD target declaration evidence (b2df588)
• guide snapshot inputs to the restore workflow (#8867) (30228c9)
• har: accept Chrome DevTools bracketed IPv6 server addresses (#7225) (5ed283d)
• harmony: classify exact manifest names once (#7206) (7d6bccb)
• harmony: exclude symlinks from unavailable files (#7886) (553f195)
• hermes: preserve external YAML anchor consumers (#5152) (84f62f7)
• hopper: admit macOS arguments before application handoff (#7732) (60bad9e)
• hopper: bind relative launcher paths once (d0e695b)
• hopper: confirm private display probe cleanup (5f91616)
• hopper: consolidate release metadata and archive identity ownership (5b98351)
• hopper: discover linked application bundles (8694dc3)
• hopper: distinguish an absent demo dialog from publisher rejection (#8074) (b1ff7cd)
• hopper: own profile reads and retain completed coordinate evidence (921142e)
• hopper: preserve regex inventory facts (1fdd3df)
• hopper: preserve selected home and cache paths (06642a4)
• hopper: reconcile observed caller relationships (#7953) (ec4a0a0)
• hopper: retain lease after startup failure (f812dc4)
• hopper: share cancellable probe output waits (f5edef3)
• ida: admit architecture families by allowlist (#7485) (1926fc2)
• ida: admit Docker host-gateway names as local MCP hosts (#8932) (3395c9e), closes #8925
• ida: align workspace discovery with readiness (#7863) (00bd92c)
• ida: complete private input writes (52b3c63)
• ida: preserve path identity across symlink traversal (1ea6903)
• ida: preserve startup failure ownership (d3af70f)
• ida: preserve Unicode literal search matches (6207843)
• ida: report registration timeout bounds (#7893) (b0b25ad)
• ida: retain selected endpoint on connection failures (#7894) (5f146b3)
• ida: separate function identity from source span (67b9181)
• il2cpp: reject module image references outside retained inventory (#8956) (da79ea0)
• il2cpp: require FAT container identity (dd2cbbf)
• il2cpp: validate retained declaring type relationships (#7946) (ef9ab91)
• il2cpp: validate selected FAT slice identity (44310bb)
• il2cpp: validate structural record extents (#7861) (183e2e2)
• input: classify unresolvable source paths (#7847) (5bef2b4)
• inputs: centralize admission and preserve caller selections (ccdeda7)
• inspector: route file locations through URL semantics (c994870)
• javascript: accept retained empty endpoint seeds (#6462) (b912ec1)
• javascript: apply package type scope to application sources (#7883) (55ee368)
• javascript: bind defaulted and destructured Webpack factory roles (#7117) (aa79f59)
• javascript: bound symbolic property and member queries (#8876) (abfccc0)
• javascript: close member-path cycles through self stores (#7131) (25f0f99), closes #7130
• javascript: distinguish bundled script locations (#7909) (086abf3)
• javascript: distinguish HTML script loads from data (83b2d16)
• javascript: emit no child process for a literal non-object options slot (#8019) (f285fd4)
• javascript: emit no event operation for a literal non-function listener (#8621) (59f5502)
• javascript: emit no fork when a literal stdio array omits the IPC channel (#7992) (2bfd84b)
• javascript: emit no fs acquisition for a literal non-flag string (#8125) (b668cea)
• javascript: emit no fs acquisition for a rejected literal mode (#8624) (172f248)
• javascript: emit no http request for a target that is not a URL (#8147) (8f920bb)
• javascript: emit no promise for a literal non-callable executor (#8264) (3640f01)
• javascript: emit no socket for a literal out-of-range port (#8137) (e5c46df)
• javascript: emit no timer for a literal non-function callback (#8044) (54d819f)
• javascript: evaluate each short-circuit left operand once (#7126) (81afb04), closes #7115
• javascript: honor effective symbolic descriptor values (#7222) (d4c511a)
• javascript: ignore async exec stdio options (#7087) (625e327)
• javascript: keep both-direction feature traces from crossing shared containers (#7743) (7c389cb)
• javascript: keep static facts after semantic results use the parent budget (#8648) (4a01211)
• javascript: keep timer cancellation within the Node handle family (#7712) (923e6f7)
• javascript: link a response body reader only to a settled fetch (#8028) (d5ba7ce)
• javascript: match resource release methods to the acquired handle (#7773) (b7442c1)
• javascript: preserve artifact failures through cleanup (ca3fd7b)
• javascript: preserve loader identity across terminal origins (#9107) (3e0599a)
• javascript: preserve native export facts in comparisons (046c4ce)
• javascript: preserve operator influence in semantic traces (#7939) (5c05eb8)
• javascript: preserve renderer path anchors (a6488a9)
• javascript: preserve repeated native resolver calls (#7824) (aba1585)
• javascript: preserve selected inputs and completed source evidence (721dd3d)
• javascript: preserve uncertain with-scope member writes (#7914) (95f0625)
• javascript: preserve uncertainty for incomplete runtime captures (#7854) (1e42124)
• javascript: preserve uncertainty for unexamined sources (#7911) (63f05d1)
• javascript: preserve unknown Next package ownership (c74059d)
• javascript: qualify network receiver evidence (25b69bb)
• javascript: qualify renderer endpoint observations (0e1500d)
• javascript: read the spawn env option as Node reads it (#7713) (f1da7f7)
• javascript: reconcile Node targets with entry assets (#8670) (2d11fd9)
• javascript: recover configuration file reads from fs/promises (#8446) (703c11c)
• javascript: remove duplicate childNodes import (#8886) (89317a3)
• javascript: report ambiguous artifact paths (#7864) (83cd1e0)
• javascript: report empty Electron coverage instead of silent zeroes (#8332) (99bcd3e)
• javascript: report SVG script references and skipped bodies (#8627) (20a282a)
• javascript: require exactly one fork IPC channel (#8017) (007e181)
• javascript: resolve electron findings through aliases of interop results (#8914) (7b6fc6f)
• javascript: resolve inline Request URLs in fetch calls (09c889b)
• javascript: resolve module-level Electron options in functions (#8960) (a2134b3)
• javascript: resolve preceding exported variable initializers and computed method keys (#5387) (cbeeeda)
• javascript: resolve relative ESM backslash paths (#4323) (1903220)
• javascript: resolve variable initializers before computed method keys (cbeeeda)
• javascript: resolve Vite build-output preload dependencies (#7745) (7aa943c)
• javascript: retain anchored route constants under reserved prefixes (#7838) (9b7c2bb)
• javascript: retain Electron switch conditions (#7910) (844bb46)
• javascript: retain guards after labelled breaks (#7841) (4e663be)
• javascript: retain package entrypoint provenance (7c8eb63)
• javascript: retain static facts under projection pressure (#7986) (54f5cf7)
• javascript: reuse shared AST child traversal (#7967) (6aeaa04)
• javascript: select JSON and addon loaders by exact suffix (#7821) (fca3318), closes #7623
• javascript: stop double-expanding application projection estimates (#7744) (8b74f30)
• javascript: stop recording replaced slot values as store receivers (#7128) (70b96b6)
• javascript: stop reporting self-defaulted receivers as module loads (#8109) (9d68aac), closes #8102
• javascript: test literals for Next page paths in linear time (#7748) (fea4f2e)
• javascript: trace boundary results to assigned bindings (#7912) (794907f)
• javascript: transient Windows private-runtime source-transfer (#8769) (4362a08)
• javascript: unify runtime module declarations (e2da92f)
• jeb: preserve engine refusal diagnostics (c4cdb76)
• jeb: preserve selected endpoint in failures (#7835) (e79ad6c)
• jeb: reconnect after stale MCP sessions (#3754) (d854fb1)
• json: consolidate dictionary admission across analysis and verification (e7f986c)
• json: preserve configuration and capture data at admission (4ca3032)
• kuna: bind cache exports to their producing inputs (8b7ee48)
• kuna: bind cached export reads to verified file state (bf876ef)
• kuna: clarify failed export record availability (#8789) (4ec2726)
• kuna: clarify single-function fallback evidence (#8742) (9a79ee8)
• kuna: give actionable lookup recovery (#8656) (d496d80)
• kuna: guide inventory selector recovery (#8397) (db0b9ac)
• kuna: keep timeout recovery from changing workers (#8687) (193e01a)
• kuna: mark project-dependent operations unavailable on export failure (#8748) (9044b6f)
• kuna: omit Mach-O data symbols from the procedure inventory (#8335) (a36c9dd)
• kuna: qualify parallel project pseudocode (#8694) (9bea563)
• kuna: recover overflow when project can answer (#8747) (1a9aa12)
• kuna: report document failures as typed codes (#8064) (3b64713)
• kuna: separate verification policy from analysis identity (#8699) (75c3cab)
• ledger: honor every selected fixture proof (#7931) (e0719cf)
• ledger: withhold readiness for unresolved evidence (#7928) (6349164)
• lifecycle: preserve source failures and native workspace diagnostics (4a82054)
• lldb: keep the bridge's no-target proof through interruption (#7111) (d32d9f2), closes #5385
• macho: derive the runtime name of each Mach-O symbol (#7105) (a8e5eaf), closes #5298
• macho: preserve leading spaces in export identities (54fbfac)
• macho: preserve literal segment name BOMs (#8040) (da5ec6b)
• macho: preserve POSIX app executable names (#7888) (583a316)
• macho: retain inspection when vtool rejects universal container (#7865) (1b636c8)
• macho: unify fixed-width name decoding (f53c256)
• macho: unify segment mapping admission (8d747c2)
• macho: validate slice overlap at shared reader (82f50f5)
• managed: decode only selected types in member inspection (#9044) (14d2c51)
• managed: explain single-type member capacity exhaustion (#9065) (6993e4a)
• managed: preserve unknown member ownership across invalid rows (a93eb39)
• managed: report graph method page coverage (3a6e4f2)
• managed: report member signature issues at artifact offsets (#7879) (30936d7), closes #7385
• managed: retain comparison target cleanup ownership (6734dee)
• managed: retain local signature comparison coverage (e304464)
• managed: retain qualified native candidates (9cad06d)
• managed: surface capacity limits in member comparison (fbe7532), closes #9021
• managed: unify metadata row and coded-index ownership (416f16e)
• managed: unify native module identity matching (f59fc19)
• mcp: advertise absolute paths for tools that reject relative inputs (#9179) (562779b)
• mcp: advertise reduced array elements with Gemini-compatible item types (#7107) (58a5275), closes #5201
• mcp: advertise standard route path schemas (76eecf7)
• mcp: align retained view handoff guidance (#7926) (31c028f)
• mcp: bound validation work before tool dispatch (#7905) (f60e42a)
• mcp: clarify discovery bounds and isolate catalog evals (#9101) (c467cf8)
• mcp: clarify retained dossier handoff in crash prompt (#8437) (b8963c1)
• mcp: distinguish unavailable batch pseudocode (#8737) (d896ab7)
• mcp: distinguish validation from connection loss (#7761) (df7119a)
• mcp: expose bounded parameter type view (#8782) (1951cdc)
• mcp: fit every advertised input schema within the 64 KiB client limit (#7119) (7336a56)
• mcp: guide address context recovery (#8766) (5a1f754)
• mcp: guide oversized unknown recovery (#7876) (2aa0d45)
• mcp: guide retained evidence input recovery (#8761) (4afb6b7)
• mcp: guide target recovery for scoped tools (#8659) (6259ac4)
• mcp: keep detail guidance in compact input schemas (#8034) (5b953e1)
• mcp: keep scoped doctor output parseable (#7648) (b3e2262)
• mcp: name the close_binary retry for retained cleanup (#8329) (8a6ddec)
• mcp: preserve Android cleanup failures (0eff039)
• mcp: preserve input validation issue attribution (#7981) (17ceb77)
• mcp: preserve repeated HTTP host allowlists (#8164) (d48e472)
• mcp: qualify retained Evidence view guidance (#8377) (d5b5808)
• mcp: qualify string byte-read guidance (#8704) (e749160)
• mcp: report native value flow support in session status (#8786) (688dca3)
• mcp: report selection after failed target opens (#8726) (93295c3)
• mcp: report session tool target requirements accurately (#7340) (4d2aff2)
• mcp: report target after failed open (#8613) (56be611)
• mcp: require allowed hosts for non-loopback HTTP binds (#7172) (aa6c1d4)
• mcp: return a compact binary_session status by default (#7127) (5a22ae6)
• mcp: summarize copied browser observations in input declarations (#7469) (d6f88be)
• mcp: support retained pseudocode summaries and paging (#5046) (fb453f2)
• mcp: surface byte search for encoded literals (#8817) (5a11bf0)
• mcp: surface pageable pseudocode workflow (#8481) (5679ed6)
• model: recognize safetensors ZIP signature collisions (#7816) (52617bd)
• native: accept walkable Mach-O command tables (#8002) (45cc935)
• native: account export and version text in UTF-8 bytes (74d5cab)
• native: bound PE export names before intermediate retention (60b55be)
• native: classify legacy MZ signatures before COFF (6941d5a)
• native: declare temporary filesystem writes for inspect_macho (#8959) (66d55c3)
• native: explain categories whose class reference names no class (#8006) (124e97e)
• native: find procedures by the secondary names exact lookup accepts (#8520) (44b6384)
• native: guide unreadable journal recovery (#8809) (fdfc210)
• native: keep inspect_macho usable when dyld_info refuses the slice (#9034) (c9797c5)
• native: keep UI handler offsets distinct from method records (22c493a)
• native: order Objective-C category records (21f12b8)
• native: own Mach-O load commands in binary reader (#7952) (640e19d)
• native: own Objective-C category identity (ad1a57b)
• native: preserve bookmark address uncertainty (#7966) (2b85a4a)
• native: preserve dispatch metadata format refusals (#8013) (e3d8d20)
• native: preserve function byte source qualifications (#8606) (2b740ca)
• native: preserve implementation file locations (#8667) (22c493a)
• native: preserve import names across dyld text formats (d27e3f8)
• native: preserve Mach-O target selection in macOS tools (#7831) (c0c3902)
• native: preserve mapping and literal coverage (b0c48e8)
• native: preserve Objective-C records with unreadable protocol lists (81ada02)
• native: preserve value-flow absence semantics (#8785) (1ff5a65)
• native: recognize identical function evidence (#8442) (2d25a09)
• native: reject mixed dyld refusal diagnostics (#5778) (d47efe1)
• native: reject nonzero reserved ELF dynamic symbols (#7528) (7504f2d)
• native: report dispatch target applicability (#8400) (bafe378)
• native: report NativeAOT failures as reason codes (#8053) (b894be6)
• native: retain all breakpoint locations within budget (#7975) (2ae7878)
• native: retain cleanup failures across capability fallback (29ebd67)
• native: retain completed debugger evidence through reply cleanup (c06dc2d)
• native: retain defined global and weak ELF symbols with GNU version index 0 (#9100) (711b374)
• native: retain ELF dynamic symbol visibility in export evidence and views (#8617) (8b89eee), closes #8517
• native: retain lipo field declarations (06c8e14)
• native: retain selected Mach-O slice identity (#7940) (2129c17)
• native: retain value trace source evidence (#8384) (52bca6d)
• native: reuse PE header layout evidence (1dc33c0)
• native: select off-screen windows so the UI lane can complete (#8654) (26c3e9e)
• native: select versioned arm64e slices for codesign by family name (#8713) (b9138a1)
• native: separate value-trace page omission from traversal truncation (#8309) (73ff6ca), closes #8283
• native: share otool build tool parsing (8aa6df2)
• native: share Swift symbol recognition (dcfb618)
• native: show function match limitations by default (#8558) (60f9a4c)
• native: stop value traces at unconfirmed child cleanup (#8576) (f95bdbc), closes #8371
• native: use owned address grammar for coordinates (a529146)
• native: validate plist target identity (bae84d1)
• native: validate the reserved ELF dynamic symbol (fb453f2)
• native: validate the reserved ELF dynamic symbol (7504f2d)
• node-sea: bound ELF note scans by the notes a carrier holds (#8031) (1f8084c)
• objdump: preserve unknown executable identity (#8824) (c3647ad)
• outputs: use neutral destination diagnostics (#7949) (0448f31)
• paths: preserve native selections across launch and publication (f2b4468)
• paths: preserve native selections through analysis and removal (68f2d67)
• paths: preserve native traversal and unset PATH semantics (83a6cdb)
• paths: preserve selected command, output, and source identities (86ff323)
• pcap: account for SRV owner fields (178ab26)
• pcap: attribute DNS addresses by record owner (2537592)
• pcap: attribute DNS answers using wire identities (59dc48d)
• pcap: capture provider environment once (65819e8)
• pcap: preserve DNS class when attributing answers (4572f31)
• pcap: preserve metadata on duration overflow (c29a930)
• pcap: redact HTTP credentials in failed capture diagnostics (#7871) (8f9af92), closes #7812
• pcap: retain producer contradiction diagnostics (#7937) (0386efd)
• pcap: validate selected resource limiter before capture (#7947) (78a1e19)
• pe: bound forwarders to export directory (1fe92bf)
• pe: classify confirmed DOS targets as unsupported (fb453f2)
• pe: classify confirmed DOS targets as unsupported (21ad5b1)
• pe: classify valid DOS targets as unsupported (#7530) (21ad5b1)
• pe: distinguish bounded imphash name reads (#7830) (5c60720)
• pe: enforce certificate name string alphabets (#8494) (aa48d49)
• pe: reject a SignerInfo version that does not match its sid (#8924) (b2672d8)
• pe: reject certificate versions and fields RFC 5280 does not allow (#8921) (4b9392e)
• pe: reject certificates whose signature algorithms disagree (#8922) (a1660bc)
• pe: reject empty and non-minimal certificate serial INTEGERs (#8836) (772c1bc)
• pe: reject invalid certificate bit-string padding (#8011) (ca666ec)
• pe: reject malformed and repeated certificate extensions (#8928) (de8b2f3)
• pe: reject malformed certificate validity times (#8832) (a97f827)
• pe: reject misaligned certificate table offsets (#9276) (8842092)
• pe: reject non-MZ inputs before image inspection (#7709) (07dfd12)
• pe: reject surrogate code units in BMPString names (#7817) (3a46047)
• pe: report exhausted certificate decoder allowances as resource limits (#7881) (8c83886)
• plist: decode OpenStep quoted string unicode and octal escape sequences (#8794) (276d99e)
• plist: end OpenStep comments at native line separators (#7793) (8f97a45)
• plist: own dictionary decoding across Apple workflows (eb06e26)
• plist: preserve binary UID and dictionary identity (a905a71)
• plugins: align listing metadata with REA branding (#7711) (8397a0c)
• preserve address context input errors (#8419) (3e6a5cb)
• preserve address context resource recovery (#8424) (106ba17)
• preserve feature traces when owner lookup is unavailable (#8368) (6e9ee97)
• preserve nullable source-map facts and streamline model tests (#8018) (b3d31ed)
• preserve source closure during snapshot replay (#8870) (441ba94)
• process: await Swift frontend lifetime pipe (#7948) (c92322b)
• process: classify withheld Darwin environments before parser failures (26b033d)
• process: close lease peers during release (a116f2a)
• process: corroborate exiting Linux ownership candidates (#7958) (01e00da)
• process: distinguish omitted byte filenames (e152349)
• process: honor cancellation at bounded file read completion (#8908) (b153ba8)
• process: normalize capture environment overrides (7968ceb)
• process: normalize descendants of slash-spelled directory roots (#7803) (64d282b)
• process: preserve availability when macOS ownership preparation fails (#7856) (29945d4)
• process: preserve command completion and input ownership (7fa54e2)
• process: preserve comparison uncertainty and attribution (#7853) (dfa0689)
• process: preserve environment snapshots and final cancellation (e2d4c0d)
• process: preserve literal temporary-root absence text (#8859) (65311d4)
• process: preserve platform-aware environment precedence (628087a)
• process: preserve selected Darwin helper environment through execution (f02df45)
• process: preserve selected launch paths and completed command output (eb51eb6)
• process: preserve symlink target bytes (2e7a206)
• process: preserve UTF-8 at diagnostic truncation boundaries (#8907) (3eff806)
• process: re-read unreadable tokens before signaling and name the process (#8553) (2ac6d3e)
• process: redact sensitive terminal echoes before retaining Evidence (#7804) (6c895ee), closes #7782
• process: reject contradictory filesystem capture facts (#7631) (25923d3)
• process: reject unsupported one-column terminals (#7848) (4109271)
• process: remove unused Darwin helper cache type export (#8511) (76cd23d)
• process: report deadlines expiring during final cleanup (#7635) (fc3ff7b)
• process: report retained capture root (17da88f)
• process: resume buffered NDJSON frames on partial chunks (#8909) (a3621e5)
• process: retain failures through finalization (95d9d51)
• process: retain inherited pipes on output overflow (57d0ed4)
• process: retain lease directory cleanup ownership (fe95b76)
• process: retain lease recovery cleanup owners (5d5fef7)
• process: retain uncertain cleanup ownership (#7845) (114731e)
• process: retain unrepresentable filename evidence (b9e5a9f)
• prompts: include existing static artifact investigation routes (#8972) (845eb54)
• protobuf: reject malformed descriptor field declarations (#7730) (9593bc5)
• provider-selection: name whether a rejection came from availability or target support (#7220) (4da7e46), closes #7214
• providers: bind signal and capture configuration per operation (afc79ad)
• providers: deduplicate nested cleanup notifications (0e17aab)
• providers: keep each inspection on one environment snapshot (f6478c0)
• providers: keep operation environments consistent through launch (1d32eb3)
• providers: preserve cleanup retry diagnostics (7557e39)
• providers: preserve launch selections and refresh obsolete Kuna exports (77468d5)
• providers: preserve native traversal in installation paths (fa6112b)
• providers: preserve reply bytes and structured JSON ownership (da526fc)
• providers: preserve report bytes and dictionary facts (cd68181)
• providers: preserve selected filesystem identities (9be640a)
• providers: reject invalid parsed MCP JSON (cce244f)
• providers: reject malformed UTF-8 before MCP decoding (f8c5a6c)
• providers: retain completed cleanup observations (55b4efc)
• pwntools: separate reply admission from debugger enrichment (e813c4c)
• pyinstaller: leave PE carrier binary members unmarked (#6730) (9317c7d)
• python: preserve code objects after STORE_SLICE (#7815) (a6295e4)
• qlog: exclude hidden custom events from incomplete facts (#7825) (b0880d6)
• qualify call paths by provider discovery (#8443) (31278c7)
• readers: preserve completed snapshots through cleanup retries (9d2c087)
• reference: Exclude Git pointer files from source identities (#7667) (e01fcfb), closes #7551
• reference: preserve incomplete resolution uncertainty (838f5f4)
• reference: retain ambiguous source identities (4726b19)
• reference: validate Git metadata path traversal (0781c3e)
• release: reject missing manifest release boundaries (bc14312)
• report provider admission failures as typed codes (#8066) (317bf3f)
• retain address context cleanup failures (#8417) (7c755f2)
• rizin: keep debug targets off the debugger command stream (#8647) (fe677f6)
• rizin: report the output cap instead of a provider signal (#9033) (abdbaa5)
• rizin: retain rejected debugger shutdowns (0793b6c)
• runtime: preserve exact selected target identities (44b716f)
• rust: state inflate limits on the consumed zlib stream (#8835) (6c3c5eb)
• search: clarify regex diagnostics and recovery (#8776) (63b66fa)
• server: preserve cleanup failure diagnostics (7cc33fc)
• session: align resource-only status and snapshot recovery (#7896) (845080a)
• session: classify unavailable snapshot prerequisites (477f63a)
• session: classify unavailable snapshot prerequisites (#7837) (477f63a)
• session: clear provider-inferred unavailability after recovery (#8518) (3f61303)
• session: guide retained cleanup before reopening targets (#8628) (0e6943c)
• session: guide unsupported provider recovery (#8567) (197a296)
• session: preserve availability recovery guidance (#8764) (51e9027)
• session: preserve cancellation during mutation retirement (#7959) (3503578)
• session: preserve failed target restoration (0ddde82)
• session: report a missing Linux ps as provider unavailability in status (#7180) (0211a07)
• session: retain cleanup ownership during failed opens (11b025e)
• session: retain unknown cleanup across mixed failures (eb24da4)
• session: track retained bundle cleanup dependencies (6a9911e)
• setup: bind managed registrations to selected installation (c77735f)
• setup: flag unresolved migrated Claude Desktop storage (#8971) (3484432)
• setup: forward supported tool and runtime selections (f498728)
• setup: honor Droid home override (768b58c)
• setup: honor VS Code user data overrides (19f9011)
• setup: identify invalid launch environment overrides (#7899) (16cfe30)
• setup: omit manual connectors from automatic selection (#8009) (53fca98)
• setup: preserve and validate selected JEB endpoints (08f99db)
• setup: preserve configuration directory requirements (01a725e)
• setup: preserve existing configuration mode (#7942) (70a8325)
• setup: preserve explicit Codex home traversal (c849a97)
• setup: preserve explicit configuration independently of readiness (6819cc5)
• setup: preserve Hermes home traversal (8a8331b)
• setup: preserve Linux Hopper HTTP failure status (#7183) (1a91630)
• setup: preserve native configuration path traversal (14dd18a)
• setup: preserve registration choices and own prewarm (ca75643)
• setup: preserve selected home paths throughout skill installation (f8161ad)
• setup: preserve selected Hopper loader arguments (077de92)
• setup: preserve selected settings and Java paths (4803c4f)
• setup: preserve specific skill path recovery (#7791) (23e7c4e)
• setup: preserve unowned client registrations (f227745)
• setup: preserve YAML annotations during refresh (#7944) (c19f13c)
• setup: recognize inherited owned launcher (d2da713)
• setup: refuse Hopper on macOS below the release's minimum (#8548) (365c324)
• setup: register explicit MCP runtimes and preserve launcher identity (d69a54d)
• setup: replace the fixed Hopper download deadline with a stall timeout (#7150) (5fd3250)
• setup: report concurrent skill destination changes (#7898) (9b880e0)
• setup: report Kuna cache aliases consistently (#7207) (9842299)
• setup: report Kuna cache aliases consistently (#7207) (9842299)
• setup: report the failed Hopper request URL and HTTP status (#8526) (4b840aa)
• setup: resolve Hermes home ancestors before profile selection (ddb5337)
• setup: retain auxiliary tool selections in registrations (b654ac8)
• setup: retain bounded startup diagnostics without losing failures (db4d3ab)
• setup: retain explicitly selected ILSpy paths (82fe820)
• setup: spell IDA and JADX in interactive completion (#9149) (91d5370)
• setup: unify macOS version eligibility (01484bc)
• setup: validate Hopper download channel URLs (fef8324)
• setup: verify published configuration content during uninstall (030fa88)
• signals: name the limiter as a possible cause of a failed sigrok version probe (#6395) (c1ee828)
• skill: clarify packet capture tool selection (#7901) (78a350e)
• skills: parse metadata only from YAML frontmatter (258a1dd)
• snapshot: export only target-bound observations (2ad599d)
• snapshot: preserve authenticated replay provenance (0c147a4)
• snapshot: report binding mismatches (#8432) (1c1c8f6)
• snapshot: retain one-shot Ghidra pseudocode results (#8089) (ebea0f0)
• snapshot: retain publication receipt on cleanup failure (279fc04)
• source-map: clarify policy and evidence provenance (#7828) (aaf4d21)
• source-maps: resolve empty sourceRoot sources against the map URL (#8107) (24398a8), closes #8106
• sqlite: preserve completed member facts on acquisition failure (669e617)
• sqlite: preserve schema-owned input issue paths (9e4702b)
• sqlite: report SQL statement resource allowance (#7829) (128c2cf)
• sqlite: retain completed evidence through reply finalization (e596a48)
• streamline tests and preserve Darwin process ownership (#8275) (23de10b)
• test: contain browser fixture HTTP request targets (#8566) (ce9095d)
• test: load real Frida verifier address dependency (#8596) (f1819f5)
• test: remove duplicate unknown session imports (#7917) (286629b)
• test: report caller target selection coverage (#8406) (1071ad8)
• test: restrict storage fixture to loopback (#8582) (6d60db1)
• tests: remove duplicate MCP test imports (50d731d)
• test: wait for valid debugger fixture PIDs (#9208) (57fc2d4)
• trace: disclose address-only reference scope (#8575) (cc58263)
• unify executable format ownership across artifact readers (7adfcc4)
• uninstall: preserve caller-selected Kuna caches during purge (#7921) (c1df51c)
• uninstall: preserve inactive ZCode fallback servers (3dcb40d)
• uninstall: preserve layered OpenCode registrations (#7969) (953a768)
• uninstall: protect ZCode fallback registrations (#7970) (3dcb40d)
• update: bound and own metadata probe lifetimes (7404847)
• update: distinguish launcher failures from registry errors (#7843) (b21a975)
• update: preserve Bun global directory identity (4932e56)
• verification: compare retained Ghidra function evidence (#8672) (4f4e255)
• verification: keep runtime packaging and boundary fixtures complete (86e7cd9)
• verification: retain browser profile until shutdown (4055cc4)
• verification: unify client schema traversal and reference checks (eecadf3)
• verification: unify complete MCP catalog checks (2411d60)
• verification: use inspected Ghidra JDK (#8440) (9eff4f7)
• verifiers: consolidate Ghidra MCP result admission (3d74c48)
• verifiers: preserve source Evidence through shared admission (662ec2e)
• views: bind Mach-O rows to selected facets (47fa4fb)
• views: honor cancellation before admission (3431541)
• wasm: distinguish source and internal failures (abfc42c)
• wasm: name the compare_wasm_interfaces side of rejected Evidence (#7302) (1861059)
• wasm: parse interface group heads consistently (25fc081)
• wasm: retain core facts with invalid custom names (#7822) (6c76a7f)
• wasm: reuse canonical subject identity admission (f4768eb)
• wasm: share WAT comment framing (8e0b2a9)
• web-capture: bound the mitmproxy headline facet index (#2876) (e69f27f)
• web: interpret encoded Next route paths (0dea08f)
• web: omit importer integrity for the trusted resolver stub (#8693) (2f5c015)
• web: preserve Next route filename patterns (d1202c5)
• web: preserve portable captured script paths (#7862) (5119d08)
• web: retain admitted provenance through incomplete traces (b4b5c37)
• web: retain completed file identities across acquisition failures (82af5b5)
• web: retain invalid browser selection (f638028)
• web: retain invalid browser selection (#7903) (f638028)
• web: retain source-map declaration provenance (e80fb63)
• website: align Electron guide with downloadable source (#7858) (251e27e)
• website: identify all public deployment verification requests (79766ca)
• website: improve layout and clarify homepage copy (a174892)
• website: keep phone navigation labels from splitting mid-word (#7497) (313af71), closes #3597
• website: surface RL environments and adjust homepage navigation (ff6d96b)
• windows: keep polling owned process output after a failed poll (#8163) (7ba3f55)
• windows: resolve default tools before process launch (#7725) (2b8fb38), closes #7724
• windows: restore native verification fixture coverage (#7479) (740c0f5)
• windows: validate declared PE header identity (a486cfe)
• workers: preserve failure receipts and their cleanup owners (55f72b5)
• workers: reject malformed UTF-8 in JSON result files (c2b0c95)
• workers: retain cancellation through final cleanup (c66729e)
• xml: reject ambiguous namespace attribute identities (#7785) (edc908a)
• xml: reject ambiguous namespace attribute identities (#7991) (35ea02d)
• xrefs: guide symbol lookup recovery (#8753) (eac28b2)
• xrefs: trust provider address validation (5241428)
• zip: validate admitted source throughout reads (e7f29f8)

Performance Improvements

• eval: measure MCP catalog usage through the real Codex harness (#9035) (8084916)
• javascript: cache callable result syntax by AST identity (#7508) (a95b83c)
• javascript: index member-effect paths for projected reads (#8108) (767f6af)
• javascript: keep one member-effect record per stored fact (#8103) (a47dcca), closes #7774
• mcp: add opt-in hot/cold tool discovery (#9046) (0beedcd)
• mcp: defer retained views in progressive catalogs (#9151) (bacc1e3)
• native: charge function matching for the copies it makes (#7108) (cc2656b)
• process: reuse a verified Darwin ownership helper across processes (#8318) (c534e24)
• setup: wait directly for prewarm completion (855eb70)
• test: bind deferred runtime calls to advertised schemas (#8622) (8250bf2)
• tests: reuse bounded CLI workers for native matching errors (#9163) (98c589e)
• tests: reuse bounded CLI workers in mobile archive checks (#9116) (afc9cfe)
• tests: reuse CLI sessions in Electron call-path regressions (#9335) (72d5e72)

Code Refactoring

• adb: move device and client operations out of the provider switch (#8062) (a4c183b)
• admission: own inspector, web, and CLI state per host (#8058) (395b598)
• analysis-view: break the analysis view hub cycle (#8061) (940d71a)
• analysis: consolidate selection ownership (4e67bc3)
• analysis: move client cleanup to application (a2e2c29)
• artifacts: centralize completed snapshot observations (31e8492)
• artifacts: consolidate projection and PCK interpretation (db0908a)
• artifacts: describe formats in one registry (#8054) (5f9187c)
• artifacts: retain admitted Godot pack location (5d25aa4)
• artifacts: retain admitted PyInstaller cookie facts (8c8a275)
• artifacts: retain Node SEA admission facts through inventory (ff568af)
• artifacts: retain PyInstaller carrier dialect (ee654e9)
• artifacts: reuse admitted sources for extraction (cb0c732)
• artifacts: reuse descriptor range reader (21483a1)
• artifacts: reuse Mach-O framing for Node SEA discovery (7439d0d)
• artifacts: select extraction reader from inventory (a37dbb9)
• artifacts: share extraction admission and reader construction (e1ec737)
• artifacts: unify inventory integrity policy (39179db)
• artifacts: unify stable read failure ownership (bab49aa)
• asar: let listing own parsed member facts (85075fa)
• asar: retain admitted archive extents (397a559)
• browser: centralize passive source deadlines (7b25049)
• browser: resolve Link metadata identity once (5a332d8)
• browser: reuse worker URL exclusion classification (f6d9f1b)
• browser: share CDP script source capture (5093d51)
• capabilities: remove inert client requirement facade (634e566)
• captures: consolidate recorded exchange body facts (0973649)
• captures: retain SAZ member classifications (3c0e021)
• cdp: centralize execution context identity parsing (7ccecbc)
• centralize input validation and schema interpretation (6c35d74)
• ci: consolidate lint task ownership (ed62f14)
• ci: parse readiness fences with a static expression (#8586) (d3ab0fa)
• ci: unify lane ownership and guard Python tests (#8150) (cd878ad)
• cli: derive desktop limits from the input contract (36515a5)
• cli: remove obsolete JSON read error mode (9e4cf28)
• cli: retain typed analysis outcomes through delivery (3293250)
• cli: share managed comparison finalization (071a637)
• cli: use builtin argument owner directly (9eb8ba2)
• composition: unify capability bindings and cleanup ownership (#8441) (e18594b)
• config: remove legacy provider timeout re-exports (7cd6527)
• config: share bounded decimal setting validation (91bacc5)
• config: use canonical resource limit constants (23d56e1)
• consolidate binary analysis admission and format ownership (6336fe5)
• consolidate binary artifact interpretation and fixture ownership (9341b11)
• consolidate ELF and CLR record interpretation (a7f50e3)
• consolidate parsed image ownership across consumers (8a65787)
• contracts: consolidate provider and search ownership (50717c3)
• contracts: consolidate tool effect definitions (27ac1b6)
• contracts: preserve named output schema types (b529bd8)
• contracts: register CLI and MCP tools by family id (#8051) (1c14f66)
• dos: centralize MZ admission and load-image evidence (a30ffd2)
• electron: reuse source range identities (b61fe25)
• electron: use required native module facts (a18297f)
• elf: carry parsed header facts into native consumers (ba7ac79)
• elf: centralize fixed header type and flags decoding (941838f)
• elf: centralize raw table declarations (a7d71f4)
• elf: centralize symbol record decoding (90199ff)
• elf: consolidate bounded string-table interpretation (624ebb2)
• elf: consolidate header and section-name interpretation (cadd5b7)
• environment: reuse recorded query parser (212479a)
• evidence: centralize provider identity comparison (235e8bc)
• evidence: centralize publication source collection (06655af)
• evidence: centralize value flow metadata schema (bf77210)
• evidence: consolidate import staging (4b6fd03)
• evidence: return import counts from ledger owner (8691e48)
• evidence: share subject architecture declarations (68533bc)
• evidence: unify retained inputs across domains (#8299) (a989c0e)
• firmware: centralize extraction depth ceiling (d9e12c9)
• firmware: unify extraction problem interpretation (620690c)
• gdb: reuse inferior identity reader (92fb319)
• ghidra: consolidate function and inventory admission (d9908fd)
• ghidra: consolidate function containment lookup (ad92e0f)
• godot: share PCK header facts across inspections (8982f40)
• go: simplify build metadata decoding (1635e55)
• gpu: reuse canonical ELF note layout (d7d9457)
• ida: centralize capability admission (6d14e25)
• ida: consolidate pagination progress checks (21b6ea7)
• ida: reuse bounded registration reader (25a08ed)
• il2cpp: share generic container byte decoding (b3818bb)
• javascript: break the semantic analysis import cycle (#8063) (249b90c)
• javascript: consolidate renderer and route ownership (5cf7133)
• javascript: remove obsolete Electron classifier facade (9fa5a87)
• lifecycle: require cleanup for offline providers (fc7f042)
• macho: centralize dylib command and string facts (e405d68)
• macho: centralize segment and section decoding (981d806)
• macho: consolidate prefix interpretation across readers (8423c5c)
• macho: consolidate universal image selection (c7afedc)
• macho: reuse admitted header identity (37d6e8c)
• macho: reuse canonical header declarations (0929751)
• macho: share bounded header declarations (0f64f1f)
• macho: share FAT evidence interpretation (74f9870)
• macho: share header declarations across native readers (ed7b3a2)
• managed: centralize MemberRef row facts (c09fa01)
• managed: centralize method implementation flag facts (1f5c5c3)
• managed: centralize TypeDef row facts across consumers (2cdc8cb)
• managed: consolidate member comparison keys (a49a355)
• managed: retire redundant verification facade (1fe1f1f)
• mcp: bind summary delivery to tool contracts (b8f58fd)
• mcp: consolidate evidence tool execution (615fbbb)
• mcp: reuse desktop retained-summary handler (971b48f)
• mcp: reuse reverse engineering admission (e58feb4)
• mcp: share diagnostic evidence handling (e4cdf65)
• mcp: share entropy summary delivery (f8f7ac9)
• model: let format parsers own tensor range validation (2be39ef)
• native: consolidate provider-neutral analysis contracts (82fd223)
• native: retire legacy provider output wrappers (0e578d4)
• node-sea: reuse Mach-O segment facts (6fa8e2e)
• ownership: consolidate legacy aliases (567ea4b)
• ownership: consolidate snapshot and comparison facts (dbe2c97)
• ownership: remove redundant aliases (3515b26)
• pcap: centralize DNS packet facts (98e47e3)
• pe: centralize fixed COFF header decoding (b9ee8fe)
• pe: centralize resource tree facts across readers (f6805e2)
• pe: centralize section header interpretation (38ebe11)
• pe: rely on path input contracts (4f2fc7c)
• pe: reuse canonical section header facts (53779b5)
• pe: share CodeView range interpretation (92bdb44)
• pe: share optional header image and alignment facts (5c4a6c4)
• pe: share optional-header facts across readers (deed39f)
• plist: centralize binary layout and offset ownership (13fba27)
• plist: unify number source association (ded6542)
• png: share IHDR interpretation (729684a)
• process: remove unused worker PID state (f68b261)
• process: share comparison dimension projections (ec40c10)
• process: share stable file identity checks (081f2e2)
• process: unify trace outcome comparison (9aee546)
• providers: consolidate IDA and JEB MCP result admission (4981623)
• providers: move inspection scope to application (5aa23c3)
• providers: share artifact cleanup binding (65aeb80)
• providers: share client close options (dd9f5cd)
• pyinstaller: centralize CArchive member roles (df6db78)
• pyinstaller: centralize PYZ header and version facts (81add3d)
• pyinstaller: centralize PYZ member role ownership (1ce9f31)
• pyinstaller: preserve parsed compression flags (4de432d)
• python: consolidate bytecode identity across readers (d06ca09)
• reconstruction: share canonical original cases across evaluation (60daca4)
• reference: derive import lookup from reader inventory (943ae60)
• retire superseded test-only runtime entrypoints (#7515) (65f1c44)
• schemas: select native and GPU variants by name (c602fe8)
• services: centralize direct provider input admission (fab7850)
• session: share provider replay attribution (f347713)
• snapshot: centralize resource cache eligibility (5b8e415)
• snapshots: derive workflow entries from canonical schema (72fa15a)
• tooling: move completion ledger generation out of domain (8fe3b17)
• tooling: move verifier host helpers out of runtime (42f3ed7)
• verification: centralize native client result discovery (554816b)
• verification: own browser fixture lifecycle (c9df40f)
• verification: share native client fixture assertions (f4cc6c8)
• verifiers: centralize named artifact output admission (0828917)
• verifiers: consolidate capture result admission and parity (a84e0cf)
• views: centralize paging contracts (9c9c64e)
• views: share immutable result readers (7a237aa)
• web: centralize isolated script paths (bfdde7e)
• web: reuse shared provider input admission (6362ac6)
• windows: share native artifact validation (3d565fa)
• workflows: share source caveat grouping identity (5e581fd)
• zip: share end-of-directory declarations (2822208)

Documentation

• apk: clarify rotated signer agreement (#7936) (6fa48f2)
• archive historical verification and release inventories (#7519) (269630f)
• celebrate 400,000 GitHub stars 🎉 (#7801) (7b6d872)
• changelog: repair historical release heading links (#7707) (b69d8c5)
• clarify recovery for valid lookup failures (60c0cf9)
• clarify test audits and organize verification lanes (0354145)
• cli: document standard input for JSON request arguments (#7139) (6ba69cd), closes #7138
• clients: document llama.cpp MCP setup (#4878) (36dcd98)
• clients: note Droid's FACTORY_HOME_OVERRIDE (#7382) (0676ad2)
• correct the raw ARM example and document a Cortex-M language override (#7483) (b33f4a5)
• debugger: document configurable session limits (#8963) (f6f5650)
• desktop: name the get_evidence_bundle tool in the MCP section (#7266) (9e6dd8e)
• environments: explain building RL environments with REA (447907f)
• environments: lead with agent prompts (a0ddb83)
• errors: align byte entropy recovery catalog (#7884) (2f3c71f)
• errors: align MCP validation status and verification columns (#7708) (ad7d4c1)
• firmware: qualify component comparison workflows (#9143) (1480a7c)
• ghidra: clarify Objective-C Message Analyzer libobjc log (#7249) (b9d1a61)
• ghidra: count 27 read-only operations in current guides (#7794) (b4923f8), closes #7611
• ghidra: fix DOL guide PowerPC link (#7857) (46c457f)
• guide audits of existing investigation tools (#8272) (ec10702)
• guide design and verification of provider workflows (#8261) (356cc50)
• hermes: explain nested-home routing and preview limits (#4145) (b4118b9)
• ida: document migration from legacy attached registrations (d60b2ca)
• include Kuna in native provider guidance (#7929) (1631dcb)
• installation: list every engine accepted by doctor --provider (#4767) (578e4bb)
• limits: say setup forwards the selected MCP response budget (#8342) (67552d5), closes #7420
• mcp: clarify Ghidra edit lifetime on switches (#8484) (f3c2166)
• mcp: clarify residual unknown target scope (#8547) (18cc161)
• mcp: clarify retained evidence view support (#8480) (ce45f92)
• mcp: document native function analysis scope (#8389) (0ecf3a4)
• mcp: document verified FastMCP catalog recovery (#9113) (39827ec)
• mcp: explain PowerShell launch environment scope (#8961) (347dc9a)
• mcp: list every tool that omits the untrusted-content marker (#8837) (52ff312)
• native: clarify memory and file byte sources (#8829) (78d7bf3)
• organize canonical documentation layout and verify new pages (#2791) (a67525c)
• prioritize product contracts over skill guidance (293db94)
• providers: verify prerequisite recovery and sibling failures (d684125)
• readme: add Join us on Discord button (#8754) (4f7c4cc)
• readme: align Linux x64 analysis prerequisites (#7997) (b966ebe)
• readme: move Discord button below site links (8c857ce)
• readme: move Discord button below site links (#8755) (28bffe9)
• scope performance measurements to concrete needs (90b793e)
• search: clarify provider case folding (86d4a21)
• security: add fallback reporting email (3b26d7f)
• setup: clarify Hopper failures and installer verification (3842809)
• setup: describe FreeBuff as published setup support (#7246) (4910e14)
• setup: restore target and Hopper launch settings (#7902) (539a494)
• setup: state the FreeBuff minimum release (#7066) (975900f)
• skill: clarify scenario pause deadlines (#7961) (bd37925)
• skill: route SPA passive capture through allowed_origins (#7252) (7570aab)
• testing: explain npm launcher selection in PowerShell (#8962) (455d795)
• tool-design: audit agent workflow guidance (#8439) (65986d0)
• uninstall: clarify malformed shared config retention (#7507) (6efb384), closes #7320
• update: align error catalog with current recovery (#7795) (b9a8f8e)
• website: clarify platform setup requirements (#7925) (d3ecf68)
• website: correct client and IDA support guidance (#7918) (21b1927)
• website: showcase RL environment workflows (14631f6)

Tests

• artifacts: handle blocked open-parent renames (#7904) (ddefba8)
• artifacts: verify evidence refresh after reopen (92213a9)
• assert absolute-path facts without frozen sentences (#9231) (2e2f981)
• bind MCP validation and cleanup faults to selected inputs (99062fe)
• browser: verify out-of-order response correlation (69b328e)
• captures: assert retained snapshot evidence (492860e)
• ci: align source preservation and catalog assertions (741f2de)
• ci: allow more time for Windows CLI subprocesses (d82ba11)
• ci: avoid pinning skip warning wording (ec3f84b)
• ci: require provider checks and reduce test startup (#8145) (77b0931)
• ci: restore client registration and doctor checks (#9128) (fe27f96)
• clarify CLI and process diagnostics (c928bb8)
• clarify environment and desktop contract checks (872890b)
• clarify inspector coverage limitations (5cafea5)
• clarify Mach-O ciphertext diagnostics (6cf4e76)
• clarify Mach-O UUID fallback diagnostics (75ff321)
• clarify managed evidence limitations (79da7ea)
• clarify managed IL boundary diagnostics (407d7f6)
• clarify native UI recovery guidance (10de107)
• clarify process capture redaction limitation (70fd792)
• clarify process ownership diagnostics (ee54b2e)
• clarify source map and worker diagnostics (110932c)
• cli: cover Frida argument admission and spawn ordering (#3356) (c7fce66)
• cli: cover literal Markdown heading output (#7866) (c2cc7e6)
• cli: cover production doctor output option ordering (#6683) (1d4e9f3)
• cli: select shutdown budgets for worker lifecycle scenarios (#9170) (39bd0cc)
• cutter: synchronize peer descriptor close before cancellation (#9082) (34b954e)
• decouple desktop diagnostics from exact wording (ab9dc45)
• desktop: cover ENOTDIR intermediate path refusal (#8692) (a56cc93)
• desktop: make Python output fixtures portable (#9066) (f624c3b)
• electron: consolidate handler presence coverage in public workflows (19082ac)
• electron: remove duplicate graph protocol fixture (e8cb717)
• elf: cover big-endian ABI notes through CLI and MCP (#8803) (9a68ce5)
• firmware: cover S-record high address workflows (#8897) (25b62db)
• firmware: keep producer fixtures within supported Node limits (#7048) (b75419b)
• firmware: pin the staging ceiling at the request boundary (#7775) (4671947)
• focus diagnostics and evidence checks on behavior (#9303) (5044e20)
• gdb: expect configurable stream truncation diagnostics (#8965) (ce07d35)
• ghidra: check regex recovery at its owning boundary (#8578) (2be2d00)
• ghidra: check retained historical snapshot evidence (#8381) (0aaa582)
• ghidra: check structured snapshot profile mismatch (#8536) (15107aa)
• ghidra: expect carved MIPS copies to be refused at target opening (#8227) (091892d)
• ghidra: verify installation metadata budget through doctor (#6690) (85775b6)
• ghidra: verify PSP VFPU prefix and vector decoding (#8614) (dc9f329)
• guard target format vocabularies and DOL snapshot saves (#7481) (54756ff)
• hopper: verify bootstrap cleanup ownership (c79bd41)
• javascript: cover Request endpoint identity and provenance (#6365) (09c889b)
• javascript: normalize module resolution oracle paths (#9159) (0fc35a0)
• mcp: bound schema compilation for native and web workflows (6be6596)
• mcp: validate selected tools without compiling the entire catalog (cc5a969)
• native: bind lipo refusal fixture to a real source (#7977) (9cc3417)
• package: migrate skill metadata fixture to frontmatter (23bc51d)
• paths: isolate POSIX cwd fixture from the host platform (#9092) (edd32e5)
• process: strengthen macOS token parser boundaries (96606f5)
• providers: verify malformed HTTP acquisition recovery (ce5373e)
• prune duplicate managed comparison limitation (ff542ad)
• prune redundant native parser assertions (33b4762)
• reduce brittle assertions and test-only runtime paths (#9289) (352a846)
• reduce wording coupling and prune redundant coverage (1596d6a)
• reference: pin excluded package main resolution (#7941) (7c57005)
• repair snapshot and setup isolation checks (80427af)
• rust: assert non-retryable compiler-hash capacity in CLI and MCP (#5504) (#7520) (3959b68)
• search: cover Unicode literal syntax and astral case folding (#6685) (7ad3d79)
• setup: align Hermes symlink preview expectations (b3fd0aa)
• setup: align launch fixtures with runtime and host requirements (1173c0a)
• simplify Ghidra coverage propagation fixture (ad59738)
• sqlite: gate projection checks on native limits (b8cdbdf)
• strengthen and prune audited test coverage (#8573) (7bcefea)
• strengthen integration oracles and verification (#8295) (6014928)
• strengthen regression oracles and cleanup ownership (#8152) (675d407)

Continuous Integration

• codeql: separate production scans from test fixtures (#8450) (a6caa79)
• environment: pin the real agentenv lane to agentenv-framework 0.9.1431 (#8865) (0ac6be1)
• exempt designated authors from readiness declaration (920d634)
• ghidra: probe M-profile ARM and Xtensa decoding (#7482) (19ab239)
• source 20,888 passed / 15 skipped; seven built-dependent shards, static, docs, package builds, Linux native baseline and real JS recovery CLI/MCP passed. Shard 6 Hermes path-preview failures both reproduce on exact main b9d1a61dd; Portable tests fails downstream. Greptile 5/5, no findings; Codex quota exhausted. Authorized admin bypass for unrelated baseline CI and unchecked human readiness; no human review attestation made. (a95b83c)

---

This PR was generated with Release Please. See documentation.