Failure to establish a filesystem object's canonical authorization identity.
Typed application failure produced by controlled process capture.
Owner-only project policy persistence failure.
Safe diagnostics for a browser process that did not publish a CDP port.
Caller cancellation won before provider-neutral work completed.
Selected provider cannot execute a declared analysis operation.
Base class for expected analysis, provider, and session failures.
Caller input failed provider-neutral application parsing.
Provider output failed provider-neutral application parsing.
Provider-neutral invalid analysis input or output at an application boundary.
Provider-neutral operation exceeded its declared execution deadline.
Artifact inventory or extraction failed a typed safety boundary.
A supplied target path could not be safely opened as a supported app or binary.
A bounded passive browser observation failed at its CDP boundary.
Runtime configuration could not be parsed safely.
Evidence bundle filesystem access failed within the configured policy.
Evidence identity, schema, or bundle manifests failed integrity checks.
A bounded evidence ledger cannot accept more records or serialized bytes.
A session Evidence reference is missing or has the wrong semantic identity.
The caller cancelled a Hopper operation before it completed.
Base class for failures produced specifically by the Hopper provider.
The owned Hopper bridge stopped before its client was closed.
Hopper returned bytes or JSON that do not satisfy the NDJSON RPC contract.
Hopper's JSON-RPC endpoint returned an expected remote error response.
Hopper or the repository bridge could not be started.
Hopper did not respond within the configured operation deadline.
Persistent investigation workspace access or CAS validation failed.
No app or binary session exists for an analysis request.
Exact denied authority used by both CLI and MCP remediation.
A provider adapter failed outside its more precise typed variants.
No configured provider can satisfy a requested operation or target binding.
Approved replay commitment no longer matches the immediately rebuilt plan.
Residual-unknown mutation failed a lifecycle, reference, or CAS invariant.
A proposed grant exceeds the administrator-owned maximum authority.
Local launch failure retained as the cause of a provider-neutral error.
Provider-owned failure with bounded, token-redacted local diagnostics.
Expected operation failure returned by the authenticated Java bridge.
Project authenticated APK inventory Evidence into Android application Evidence.
+Project authenticated IPA inventory Evidence into Apple application evidence.
+Build stable per-operation availability without hiding familiar tools.
Process plus private log coordinates returned by a Ghidra launcher.
Additional structured context for a Ghidra session failure.
Process handle returned by a bridge launcher.
Process handle returned by a provider-specific launcher.
Optional ReadonlyartifactOptional ReadonlyavailabilityOptional ReadonlybrowserOptional ReadonlyelectronOptional ReadonlyevidenceOptional ReadonlyinvestigationOptional ReadonlyjavascriptOptional ReadonlyjavascriptOptional ReadonlyjavascriptOptional ReadonlyloggerOptional ReadonlymanagedOptional ReadonlypermissionOptional Readonlyprocess
Owns session evidence, snapshots, workspaces, and residual unknowns.