diff --git a/docs/api/classes/application_BinarySessionRecords.BinarySessionRecords.html b/docs/api/classes/application_BinarySessionRecords.BinarySessionRecords.html
index f07607ae6..e3c600c60 100644
--- a/docs/api/classes/application_BinarySessionRecords.BinarySessionRecords.html
+++ b/docs/api/classes/application_BinarySessionRecords.BinarySessionRecords.html
@@ -21,7 +21,7 @@
+Defined in application/BinarySessionRecords.ts:46
ProtectedclearSessionRecords
@@ -91,7 +91,7 @@
Returns void
+Defined in application/BinarySessionRecords.ts:176
ProtectedclearSnapshot
@@ -100,7 +100,7 @@
Returns void
+Defined in application/BinarySessionRecords.ts:172
evidenceById
@@ -113,7 +113,7 @@
- evidenceId: string
Returns
| {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| undefined
+Defined in application/BinarySessionRecords.ts:72
exportAnalysisSnapshot
@@ -122,7 +122,7 @@
Returns Result<
{
binding: {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
provider: { id: string; name: string; version: string };
};
entries: {
execution: {
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
provider: { id: string; name: string; version: string };
raw_result: JSONType;
result: JSONType;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
path: string;
sha256: string;
}
| null;
};
operation: string;
parameters: Record<string, JSONType>;
query_id: string;
}[];
evidence_bundle: {
artifacts: {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
}[];
bundle_version: 2;
captures: { evidence_id: string; predicate_type: string }[];
environments: {
architecture: string;
id: string;
isolation: "process" | "none" | "container" | "virtual-machine";
platform: string;
}[];
providers: { id: string; name: string; version: string
| null }[];
records: (
| {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
)[];
scenarios: {
authority: "controlled-replay";
evidence_id: string;
operation: string;
}[];
unknowns: {
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string
| null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status:
| "open"
| "investigating"
| "blocked"
| "contradicted"
| "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
}[];
};
snapshot_version: 2;
target: {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
format:
| "javascript"
| "source-map"
| "plist"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "mach-o"
| "elf"
| "pe"
| "analysis-database"
| "ipa"
| "apk";
kind: "executable"
| "database"
| "archive"
| "artifact";
sha256: string;
};
},
AnalysisError,
>
+Defined in application/BinarySessionRecords.ts:88
exportEvidenceBundle
@@ -131,7 +131,7 @@
Returns {
artifacts: {
architecture: "x86" | "x86_64" | "arm" | "arm64" | null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
}[];
bundle_version: 2;
captures: { evidence_id: string; predicate_type: string }[];
environments: {
architecture: string;
id: string;
isolation: "process" | "none" | "container" | "virtual-machine";
platform: string;
}[];
providers: { id: string; name: string; version: string
| null }[];
records: (
| {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
)[];
scenarios: {
authority: "controlled-replay";
evidence_id: string;
operation: string;
}[];
unknowns: {
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string
| null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status: "open" | "investigating" | "blocked" | "contradicted" | "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
}[];
}
+Defined in application/BinarySessionRecords.ts:76
hasEvidence
@@ -144,7 +144,7 @@
- evidenceId: string
Returns boolean
+Defined in application/BinarySessionRecords.ts:68
importAnalysisSnapshot
@@ -157,7 +157,7 @@
- snapshot: {
binding: {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
provider: { id: string; name: string; version: string };
};
entries: {
execution: {
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
provider: { id: string; name: string; version: string };
raw_result: JSONType;
result: JSONType;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
path: string;
sha256: string;
}
| null;
};
operation: string;
parameters: Record<string, JSONType>;
query_id: string;
}[];
evidence_bundle: {
artifacts: {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
}[];
bundle_version: 2;
captures: { evidence_id: string; predicate_type: string }[];
environments: {
architecture: string;
id: string;
isolation: "process" | "none" | "container" | "virtual-machine";
platform: string;
}[];
providers: { id: string; name: string; version: string
| null }[];
records: (
| {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
)[];
scenarios: {
authority: "controlled-replay";
evidence_id: string;
operation: string;
}[];
unknowns: {
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string
| null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status:
| "open"
| "investigating"
| "blocked"
| "contradicted"
| "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
}[];
};
snapshot_version: 2;
target: {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
format:
| "javascript"
| "source-map"
| "plist"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "mach-o"
| "elf"
| "pe"
| "analysis-database"
| "ipa"
| "apk";
kind: "executable"
| "database"
| "archive"
| "artifact";
sha256: string;
};
}
+Defined in application/BinarySessionRecords.ts:113
importEvidenceBundle
@@ -170,7 +170,7 @@
- bundle: unknown
+Defined in application/BinarySessionRecords.ts:80
ProtectedinvalidateSnapshot
@@ -179,7 +179,7 @@
Returns void
+Defined in application/BinarySessionRecords.ts:163
investigationWorkspace
@@ -193,7 +193,7 @@
- revision: number
Returns
| {
bundle: {
artifacts: {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
}[];
bundle_version: 2;
captures: { evidence_id: string; predicate_type: string }[];
environments: {
architecture: string;
id: string;
isolation: "process" | "none" | "container" | "virtual-machine";
platform: string;
}[];
providers: { id: string; name: string; version: string
| null }[];
records: (
| {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
)[];
scenarios: {
authority: "controlled-replay";
evidence_id: string;
operation: string;
}[];
unknowns: {
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string
| null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status:
| "open"
| "investigating"
| "blocked"
| "contradicted"
| "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
}[];
};
name: string;
previous_revision_digest: string
| null;
revision: number;
revision_digest: string;
runs: (
| {
comparison_evidence_id: string
| null;
completed_stages: (
| "inventory_left"
| "inventory_right"
| "compare_artifacts"
| "find_changed_behavior"
)[];
integrity_continue_approved: boolean;
integrity_policy: "fail"
| "record-and-continue";
left: {
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
graph_sha256: string;
manifest_id: string;
root_sha256: string;
};
left_inventory_evidence_ids: string[];
limitations: string[];
max_integrity_mismatches: number;
options: {
change_limit: number;
max_compression_ratio: number;
max_depth: number;
max_entries: number;
max_entry_bytes: number;
max_path_bytes: number;
max_total_bytes: number;
page_size: number;
};
request_sha256: string;
result_evidence_id: string
| null;
right: {
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
graph_sha256: string;
manifest_id: string;
root_sha256: string;
};
right_inventory_evidence_ids: string[];
run_id: string;
schema_version: 1;
status: "complete"
| "running";
}
| {
comparison_evidence_id: string
| null;
completed_stages: (
| "inventory_left"
| "inventory_right"
| "compare_artifacts"
| "find_changed_behavior"
)[];
integrity_continue_approved: boolean;
integrity_policy: "fail"
| "record-and-continue";
left: {
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
graph_sha256: string;
manifest_id: string;
root_sha256: string;
};
left_inventory_evidence_ids: string[];
legacy_request_identity: true;
limitations: string[];
max_integrity_mismatches: number;
options: {
change_limit: number;
max_compression_ratio: number;
max_depth: number;
max_entries: number;
max_entry_bytes: number;
max_path_bytes: number;
max_total_bytes: number;
page_size: number;
};
request_sha256: string;
result_evidence_id: string
| null;
right: {
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
graph_sha256: string;
manifest_id: string;
root_sha256: string;
};
right_inventory_evidence_ids: string[];
run_id: string;
schema_version: 1;
status: "complete"
| "running";
}
)[];
workspace_id: string;
workspace_version: 1;
}
| undefined
+Defined in application/BinarySessionRecords.ts:192
investigationWorkspaces
@@ -202,7 +202,7 @@
Returns readonly {
bundle: {
artifacts: {
architecture: "x86" | "x86_64" | "arm" | "arm64" | null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
}[];
bundle_version: 2;
captures: { evidence_id: string; predicate_type: string }[];
environments: {
architecture: string;
id: string;
isolation: "process" | "none" | "container" | "virtual-machine";
platform: string;
}[];
providers: { id: string; name: string; version: string
| null }[];
records: (
| {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
)[];
scenarios: {
authority: "controlled-replay";
evidence_id: string;
operation: string;
}[];
unknowns: {
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string
| null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status:
| "open"
| "investigating"
| "blocked"
| "contradicted"
| "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
}[];
};
name: string;
previous_revision_digest: string
| null;
revision: number;
revision_digest: string;
runs: (
| {
comparison_evidence_id: string
| null;
completed_stages: (
| "inventory_left"
| "inventory_right"
| "compare_artifacts"
| "find_changed_behavior"
)[];
integrity_continue_approved: boolean;
integrity_policy: "fail"
| "record-and-continue";
left: {
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
graph_sha256: string;
manifest_id: string;
root_sha256: string;
};
left_inventory_evidence_ids: string[];
limitations: string[];
max_integrity_mismatches: number;
options: {
change_limit: number;
max_compression_ratio: number;
max_depth: number;
max_entries: number;
max_entry_bytes: number;
max_path_bytes: number;
max_total_bytes: number;
page_size: number;
};
request_sha256: string;
result_evidence_id: string
| null;
right: {
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
graph_sha256: string;
manifest_id: string;
root_sha256: string;
};
right_inventory_evidence_ids: string[];
run_id: string;
schema_version: 1;
status: "complete"
| "running";
}
| {
comparison_evidence_id: string
| null;
completed_stages: (
| "inventory_left"
| "inventory_right"
| "compare_artifacts"
| "find_changed_behavior"
)[];
integrity_continue_approved: boolean;
integrity_policy: "fail"
| "record-and-continue";
left: {
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
graph_sha256: string;
manifest_id: string;
root_sha256: string;
};
left_inventory_evidence_ids: string[];
legacy_request_identity: true;
limitations: string[];
max_integrity_mismatches: number;
options: {
change_limit: number;
max_compression_ratio: number;
max_depth: number;
max_entries: number;
max_entry_bytes: number;
max_path_bytes: number;
max_total_bytes: number;
page_size: number;
};
request_sha256: string;
result_evidence_id: string
| null;
right: {
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
graph_sha256: string;
manifest_id: string;
root_sha256: string;
};
right_inventory_evidence_ids: string[];
run_id: string;
schema_version: 1;
status: "complete"
| "running";
}
)[];
workspace_id: string;
workspace_version: 1;
}[]
+Defined in application/BinarySessionRecords.ts:202
listUnknowns
@@ -215,7 +215,7 @@
- filters: {
domain?: string;
severity?: "low" | "medium" | "high" | "critical";
status?: "open" | "investigating" | "blocked" | "contradicted" | "resolved";
} = {}
Returns {
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string | null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status: "open" | "investigating" | "blocked" | "contradicted" | "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
}[]
+Defined in application/BinarySessionRecords.ts:273
ProtectedlookupSnapshot
@@ -231,7 +231,7 @@
- parameters: Readonly<Record<string, JsonValue>>
+Defined in application/BinarySessionRecords.ts:146
ProtectedmatchesSnapshot
@@ -245,7 +245,7 @@
- profile:
| {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
}
| null
Returns boolean
+Defined in application/BinarySessionRecords.ts:132
reconstructionCoverageWorkspace
@@ -259,7 +259,7 @@
- revision: number
Returns
| {
artifacts: {
artifact_id: string;
artifact_sha256: string;
environment_sha256: string;
evidence_ids: string[];
version: string;
}[];
boundaries: {
allowed_dispositions: ("external" | "non-goal")[];
allowed_unknown_ids: string[];
boundary_id: string;
required_claim_ids: string[];
required_package_proof_kinds: (
| "build"
| "clean-install"
| "package-contents"
| "runtime-routing"
| "authority-independence"
)[];
required_surface_ids: string[];
title: string;
}[];
claims: {
claim_id: string;
kind: string;
required_authority: | "external"
| "shipped-artifact"
| "controlled-replay"
| "live-observation";
required_dimensions: string[];
surface_ids: string[];
title: string;
}[];
contradictions: {
claim_ids: string[];
contradiction_id: string;
evidence_ids: string[];
status: "resolved"
| "active";
surface_ids: string[];
}[];
evidence_bundle: {
artifacts: {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
}[];
bundle_version: 2;
captures: { evidence_id: string; predicate_type: string }[];
environments: {
architecture: string;
id: string;
isolation: "process" | "none" | "container" | "virtual-machine";
platform: string;
}[];
providers: { id: string; name: string; version: string
| null }[];
records: (
| {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
)[];
scenarios: {
authority: "controlled-replay";
evidence_id: string;
operation: string;
}[];
unknowns: {
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string
| null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status:
| "open"
| "investigating"
| "blocked"
| "contradicted"
| "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
}[];
};
name: string;
owners: {
ownership: | {
authority_route: "unknown"
| "none"
| "detected";
disposition: "implemented";
owner_export: string | null;
owner_path: string;
owner_sha256: string;
package_state: "unknown" | "missing" | "distributed";
path_state: "unknown" | "missing" | "present";
}
| { disposition: "external"
| "non-goal"; rationale: string };
surface_id: string;
}[];
package_proofs: {
artifact_sha256s: string[];
evidence_ids: string[];
kind: | "build"
| "clean-install"
| "package-contents"
| "runtime-routing"
| "authority-independence";
proof_id: string;
status: "unknown"
| "fail"
| "pass"
| "unsupported"
| "skipped";
}[];
previous_revision_sha256: string
| null;
residual_unknown_ids: string[];
revision: number;
revision_sha256: string;
schema_version: 1;
surfaces: {
artifact_id: string;
authority:
| "external"
| "observed"
| "derived"
| "inferred"
| "historical";
dependency_surface_ids: string[];
evidence_ids: string[];
family: string;
location: string;
occurrence_id: string
| null;
surface_id: string;
}[];
verifier_contracts: {
authority: | "external"
| "shipped-artifact"
| "controlled-replay"
| "live-observation";
claim_ids: string[];
contract_sha256: string;
dimensions: string[];
max_age_ms: number;
minimum_repeats: number;
normalization_removes_dimensions: false;
normalization_sha256: string;
verifier_id: string;
}[];
verifier_results: {
artifact_sha256s: string[];
contract_sha256: string;
covered_claim_ids: string[];
covered_dimensions: string[];
evidence_ids: string[];
normalization_sha256: string;
observed_at: string;
owner_sha256s: string[];
repeats: number;
status: | "unknown"
| "truncated"
| "fail"
| "pass"
| "unsupported"
| "skipped";
verifier_id: string;
}[];
workspace_id: string;
}
| undefined
+Defined in application/BinarySessionRecords.ts:216
reconstructionCoverageWorkspaces
@@ -268,7 +268,7 @@
Returns readonly {
artifacts: {
artifact_id: string;
artifact_sha256: string;
environment_sha256: string;
evidence_ids: string[];
version: string;
}[];
boundaries: {
allowed_dispositions: ("external" | "non-goal")[];
allowed_unknown_ids: string[];
boundary_id: string;
required_claim_ids: string[];
required_package_proof_kinds: (
| "build"
| "clean-install"
| "package-contents"
| "runtime-routing"
| "authority-independence"
)[];
required_surface_ids: string[];
title: string;
}[];
claims: {
claim_id: string;
kind: string;
required_authority: | "external"
| "shipped-artifact"
| "controlled-replay"
| "live-observation";
required_dimensions: string[];
surface_ids: string[];
title: string;
}[];
contradictions: {
claim_ids: string[];
contradiction_id: string;
evidence_ids: string[];
status: "resolved"
| "active";
surface_ids: string[];
}[];
evidence_bundle: {
artifacts: {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
}[];
bundle_version: 2;
captures: { evidence_id: string; predicate_type: string }[];
environments: {
architecture: string;
id: string;
isolation: "process" | "none" | "container" | "virtual-machine";
platform: string;
}[];
providers: { id: string; name: string; version: string
| null }[];
records: (
| {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
)[];
scenarios: {
authority: "controlled-replay";
evidence_id: string;
operation: string;
}[];
unknowns: {
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string
| null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status:
| "open"
| "investigating"
| "blocked"
| "contradicted"
| "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
}[];
};
name: string;
owners: {
ownership: | {
authority_route: "unknown"
| "none"
| "detected";
disposition: "implemented";
owner_export: string | null;
owner_path: string;
owner_sha256: string;
package_state: "unknown" | "missing" | "distributed";
path_state: "unknown" | "missing" | "present";
}
| { disposition: "external"
| "non-goal"; rationale: string };
surface_id: string;
}[];
package_proofs: {
artifact_sha256s: string[];
evidence_ids: string[];
kind: | "build"
| "clean-install"
| "package-contents"
| "runtime-routing"
| "authority-independence";
proof_id: string;
status: "unknown"
| "fail"
| "pass"
| "unsupported"
| "skipped";
}[];
previous_revision_sha256: string
| null;
residual_unknown_ids: string[];
revision: number;
revision_sha256: string;
schema_version: 1;
surfaces: {
artifact_id: string;
authority: "external" | "observed" | "derived" | "inferred" | "historical";
dependency_surface_ids: string[];
evidence_ids: string[];
family: string;
location: string;
occurrence_id: string | null;
surface_id: string;
}[];
verifier_contracts: {
authority: | "external"
| "shipped-artifact"
| "controlled-replay"
| "live-observation";
claim_ids: string[];
contract_sha256: string;
dimensions: string[];
max_age_ms: number;
minimum_repeats: number;
normalization_removes_dimensions: false;
normalization_sha256: string;
verifier_id: string;
}[];
verifier_results: {
artifact_sha256s: string[];
contract_sha256: string;
covered_claim_ids: string[];
covered_dimensions: string[];
evidence_ids: string[];
normalization_sha256: string;
observed_at: string;
owner_sha256s: string[];
repeats: number;
status: | "unknown"
| "truncated"
| "fail"
| "pass"
| "unsupported"
| "skipped";
verifier_id: string;
}[];
workspace_id: string;
}[]
+Defined in application/BinarySessionRecords.ts:226
recordEvidence
@@ -281,7 +281,7 @@
- evidence:
| {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
+Defined in application/BinarySessionRecords.ts:59
recordEvidenceWithUnknown
@@ -295,7 +295,7 @@
- input: {
approved: true;
contradicting_evidence_ids: string[];
domain: string;
question: string;
recommended_probes: { operation: string; rationale: string }[];
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
severity: "low"
| "medium"
| "high"
| "critical";
supporting_evidence_ids: string[];
}
Returns Result<
| {
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string
| null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status: "open" | "investigating" | "blocked" | "contradicted" | "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
}
| null,
AnalysisError,
>
+Defined in application/BinarySessionRecords.ts:240
ProtectedrecordSnapshot
@@ -308,7 +308,7 @@
- input: {
execution: AnalysisExecution;
operation: AnalysisOperation;
parameters: Readonly<Record<string, JsonValue>>;
profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
target: BinaryTarget;
}
Returns void
+Defined in application/BinarySessionRecords.ts:157
recordUnknown
@@ -321,7 +321,7 @@
- input: {
approved: true;
contradicting_evidence_ids: string[];
domain: string;
question: string;
recommended_probes: { operation: string; rationale: string }[];
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
severity: "low"
| "medium"
| "high"
| "critical";
supporting_evidence_ids: string[];
}
Returns Result<
{
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string
| null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status: "open" | "investigating" | "blocked" | "contradicted" | "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
},
AnalysisError,
>
+Defined in application/BinarySessionRecords.ts:230
ProtectedresetSnapshotInvalidation
@@ -330,7 +330,7 @@
Returns void
+Defined in application/BinarySessionRecords.ts:168
retainInvestigationWorkspace
@@ -343,7 +343,7 @@
- workspace: {
bundle: {
artifacts: {
architecture: "x86" | "x86_64" | "arm" | "arm64" | null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
}[];
bundle_version: 2;
captures: { evidence_id: string; predicate_type: string }[];
environments: {
architecture: string;
id: string;
isolation: "process" | "none" | "container" | "virtual-machine";
platform: string;
}[];
providers: { id: string; name: string; version: string
| null }[];
records: (
| {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
)[];
scenarios: {
authority: "controlled-replay";
evidence_id: string;
operation: string;
}[];
unknowns: {
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string
| null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status:
| "open"
| "investigating"
| "blocked"
| "contradicted"
| "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
}[];
};
name: string;
previous_revision_digest: string
| null;
revision: number;
revision_digest: string;
runs: (
| {
comparison_evidence_id: string
| null;
completed_stages: (
| "inventory_left"
| "inventory_right"
| "compare_artifacts"
| "find_changed_behavior"
)[];
integrity_continue_approved: boolean;
integrity_policy: "fail"
| "record-and-continue";
left: {
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
graph_sha256: string;
manifest_id: string;
root_sha256: string;
};
left_inventory_evidence_ids: string[];
limitations: string[];
max_integrity_mismatches: number;
options: {
change_limit: number;
max_compression_ratio: number;
max_depth: number;
max_entries: number;
max_entry_bytes: number;
max_path_bytes: number;
max_total_bytes: number;
page_size: number;
};
request_sha256: string;
result_evidence_id: string
| null;
right: {
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
graph_sha256: string;
manifest_id: string;
root_sha256: string;
};
right_inventory_evidence_ids: string[];
run_id: string;
schema_version: 1;
status: "complete"
| "running";
}
| {
comparison_evidence_id: string
| null;
completed_stages: (
| "inventory_left"
| "inventory_right"
| "compare_artifacts"
| "find_changed_behavior"
)[];
integrity_continue_approved: boolean;
integrity_policy: "fail"
| "record-and-continue";
left: {
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
graph_sha256: string;
manifest_id: string;
root_sha256: string;
};
left_inventory_evidence_ids: string[];
legacy_request_identity: true;
limitations: string[];
max_integrity_mismatches: number;
options: {
change_limit: number;
max_compression_ratio: number;
max_depth: number;
max_entries: number;
max_entry_bytes: number;
max_path_bytes: number;
max_total_bytes: number;
page_size: number;
};
request_sha256: string;
result_evidence_id: string
| null;
right: {
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
graph_sha256: string;
manifest_id: string;
root_sha256: string;
};
right_inventory_evidence_ids: string[];
run_id: string;
schema_version: 1;
status: "complete"
| "running";
}
)[];
workspace_id: string;
workspace_version: 1;
}
Returns "added" | "duplicate"
+Defined in application/BinarySessionRecords.ts:182
retainReconstructionCoverageWorkspace
@@ -356,7 +356,7 @@
- workspace: {
artifacts: {
artifact_id: string;
artifact_sha256: string;
environment_sha256: string;
evidence_ids: string[];
version: string;
}[];
boundaries: {
allowed_dispositions: ("external" | "non-goal")[];
allowed_unknown_ids: string[];
boundary_id: string;
required_claim_ids: string[];
required_package_proof_kinds: (
| "build"
| "clean-install"
| "package-contents"
| "runtime-routing"
| "authority-independence"
)[];
required_surface_ids: string[];
title: string;
}[];
claims: {
claim_id: string;
kind: string;
required_authority: | "external"
| "shipped-artifact"
| "controlled-replay"
| "live-observation";
required_dimensions: string[];
surface_ids: string[];
title: string;
}[];
contradictions: {
claim_ids: string[];
contradiction_id: string;
evidence_ids: string[];
status: "resolved"
| "active";
surface_ids: string[];
}[];
evidence_bundle: {
artifacts: {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
}[];
bundle_version: 2;
captures: { evidence_id: string; predicate_type: string }[];
environments: {
architecture: string;
id: string;
isolation: "process" | "none" | "container" | "virtual-machine";
platform: string;
}[];
providers: { id: string; name: string; version: string
| null }[];
records: (
| {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
)[];
scenarios: {
authority: "controlled-replay";
evidence_id: string;
operation: string;
}[];
unknowns: {
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string
| null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status:
| "open"
| "investigating"
| "blocked"
| "contradicted"
| "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
}[];
};
name: string;
owners: {
ownership: | {
authority_route: "unknown"
| "none"
| "detected";
disposition: "implemented";
owner_export: string | null;
owner_path: string;
owner_sha256: string;
package_state: "unknown" | "missing" | "distributed";
path_state: "unknown" | "missing" | "present";
}
| { disposition: "external"
| "non-goal"; rationale: string };
surface_id: string;
}[];
package_proofs: {
artifact_sha256s: string[];
evidence_ids: string[];
kind: | "build"
| "clean-install"
| "package-contents"
| "runtime-routing"
| "authority-independence";
proof_id: string;
status: "unknown"
| "fail"
| "pass"
| "unsupported"
| "skipped";
}[];
previous_revision_sha256: string
| null;
residual_unknown_ids: string[];
revision: number;
revision_sha256: string;
schema_version: 1;
surfaces: {
artifact_id: string;
authority: "external" | "observed" | "derived" | "inferred" | "historical";
dependency_surface_ids: string[];
evidence_ids: string[];
family: string;
location: string;
occurrence_id: string | null;
surface_id: string;
}[];
verifier_contracts: {
authority: | "external"
| "shipped-artifact"
| "controlled-replay"
| "live-observation";
claim_ids: string[];
contract_sha256: string;
dimensions: string[];
max_age_ms: number;
minimum_repeats: number;
normalization_removes_dimensions: false;
normalization_sha256: string;
verifier_id: string;
}[];
verifier_results: {
artifact_sha256s: string[];
contract_sha256: string;
covered_claim_ids: string[];
covered_dimensions: string[];
evidence_ids: string[];
normalization_sha256: string;
observed_at: string;
owner_sha256s: string[];
repeats: number;
status: | "unknown"
| "truncated"
| "fail"
| "pass"
| "unsupported"
| "skipped";
verifier_id: string;
}[];
workspace_id: string;
}
Returns "added" | "duplicate"
+Defined in application/BinarySessionRecords.ts:206
ProtectedselectSnapshot
@@ -370,7 +370,7 @@
- profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
}
Returns void
+Defined in application/BinarySessionRecords.ts:139
updateUnknown
@@ -383,7 +383,7 @@
- input: {
approved: true;
contradicting_evidence_ids: string[];
expected_revision: number;
recommended_probes: { operation: string; rationale: string }[];
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
severity: "low"
| "medium"
| "high"
| "critical";
status: "open" | "investigating" | "blocked" | "contradicted" | "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
}
Returns Result<
{
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string
| null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status: "open" | "investigating" | "blocked" | "contradicted" | "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
},
AnalysisError,
>
+Defined in application/BinarySessionRecords.ts:251
verifyUnknownResolution
@@ -396,7 +396,7 @@
- unknownId: string
Returns Result<
{
truthVerified: boolean;
unknown: {
contradicting_evidence_ids: string[];
domain: string;
mutation_evidence_ids: string[];
previous_revision_digest: string
| null;
question: string;
recommended_probes: { operation: string; rationale: string }[];
registry_version: 1;
relationships: {
type: "depends-on" | "related-to" | "contradicts";
unknown_id: string;
}[];
required_authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference"
| null;
required_confidence: "observed"
| "derived"
| "inferred";
required_environment:
| {
architecture: string
| null;
id: string | null;
isolation: "process" | "none" | "container" | "virtual-machine" | null;
platform: string | null;
}
| null;
resolution: | {
disposition: "verified";
evidence_ids: string[];
rationale: string;
}
| {
disposition: "withdrawn"
| "out-of-scope";
evidence_ids: string[];
rationale: string;
}
| null;
revision: number;
revision_digest: string;
scope_digest: string
| null;
severity: "low" | "medium" | "high" | "critical";
status:
| "open"
| "investigating"
| "blocked"
| "contradicted"
| "resolved";
supporting_evidence_ids: string[];
unknown_id: string;
};
valid: boolean;
},
UnknownRegistryError,
>
+Defined in application/BinarySessionRecords.ts:283