3 Commits

Author	SHA1	Message	Date
morluto	4a4d36f881	fix(evidence): retain unreadable PE and Darwin process facts ... Distinguish absent CLI directories from unreadable directory counts and truncated slots while preserving known PE headers and readable CLI data. Retain environment-entry coverage in the Darwin parser and classify restricted empty, unavailable and ambiguous environments at the native boundary. Keep cleanup fail-closed; code-signing flags do not establish ownership. Validation: 116 managed source tests, 13 ownership tests, native Swift parser probe and two live Darwin run-token tests; build, static checks and docs checks pass. Restricted-flag cases use parser fixtures; no real restricted capture is claimed. Related to #2035.	2026-10-12 11:59:23 +08:00
morluto	2b27515476	fix(process): stabilize native capture and ownership prerequisites	2026-10-09 06:49:02 +08:00
morluto	63cf28fd8f	fix(process): preserve partial evidence and verify detached cleanup (#1011) ... * test(ci): allow transport delivery in source identity regression * fix(process): preserve partial evidence and verify detached cleanup * fix(process): scope Linux token sweeps by stable process identity * fix(process): retain environment permission failure codes * fix(process): wait for signaled processes before verifying cleanup * fix(process): verify sampled detached groups during cleanup * fix(electron): preserve prelaunch identities through cleanup * fix(process): retry growing Darwin process table snapshots * fix(process): retain compatibility with saved v3 capture evidence * fix(process): migrate saved v3 captures during reconstruction verification * fix(process): preserve cancellation during Darwin helper compilation * fix(process): propagate cancellation through ownership baselines * perf(javascript): cache canonical export comparison sort keys * fix(process): cancel provider ownership preparation before spawn * fix(process): isolate native compiler waiter cancellation	2026-10-08 04:46:46 +08:00