6c68ff565f
fix(process): capture complete host probe output
2026-09-29 17:36:04 +08:00
ecf3ed8bdb
refactor(tools): remove remaining arbitrary workflow caps
2026-09-29 17:00:06 +08:00
2f08c7c932
refactor(tools): remove artificial analysis ceilings
2026-09-29 16:29:23 +08:00
5457f4a2bc
refactor(schema): remove data-only version markers
2026-09-29 08:45:36 +08:00
2160d4fae5
fix: consolidate boundary ownership and cleanup failure paths ( #477 )
2026-09-08 10:59:13 +08:00
d4dc940bd8
refactor(test): keep coverage at behavioral boundaries ( #474 )
...
* refactor(test): keep coverage at behavioral boundaries
* fix(ci): restore package workflow temp-root classification
2026-08-11 18:34:32 +08:00
b8a9da0c0f
refactor(mcp): make analysis states unrepresentable ( #468 )
...
* refactor(config): parse capability settings into exact states
* refactor(runtime): encode replay and process outcomes exactly
* refactor: make analysis states unrepresentable
* refactor(mcp): register canonical schemas with SDK
* fix: preserve capability and catalog invariants
* fix(build): remove stale compiled modules
* fix(replay): update real verifier policy dependency
* fix(package): verify the complete MCP catalog
* fix(test): supply complete replay reload policy
* refactor(contracts): centralize output schema lookup
* refactor(mcp): delegate protocol boundaries to SDK
* fix(browser): approve real source capture
* fix(mcp): preserve catalog guidance
2026-08-10 02:28:11 +08:00
6901edc05d
fix: harden structured configuration comparisons ( #467 )
...
* refactor(process): split ownership observation helpers
* fix: compare structured configuration canonically
* test(conformance): tolerate Markdown line wrapping
* refactor: name caught values explicitly
2026-08-09 11:58:01 +08:00
8f229ede70
feat(electron): add autonomous Electron runtime analysis ( #464 )
...
* feat: add autonomous Electron runtime analysis
* feat(electron): add lifecycle and boundary telemetry
* feat(electron): capture runtime boundary evidence
* fix(electron): package boundary hook helper
* feat(electron): report active capture coverage
* fix(electron): account for bring-your-own runtime
* feat(electron): expand agent-owned runtime scenarios
* fix(ghidra): keep fixture credentials out of argv
* perf(test): serialize local test and docs workloads
* fix(electron): harden active runtime capture
* fix(inspector): require exact runtime target authorization
* fix(docs): make managed manifest host independent
* fix(ci): make generated catalog portable
* fix: unblock autonomous command and electron flows
* fix(electron): close popup and detached helper gaps
2026-08-05 19:07:46 +08:00
a0f8b72b7a
fix(process): tolerate exit during ownership revalidation
2026-07-24 15:34:09 +00:00
1c9e50814e
fix(ci): repair cross-platform package verification
2026-07-24 15:22:24 +00:00
62ac73cdd7
fix(process): expose launcher identity mismatch
2026-07-24 03:55:08 +00:00
9c3aec8131
fix(process): normalize macOS launcher identity
2026-07-24 03:38:25 +00:00
513fa294a4
feat(process): record provider and verifier run lineage
2026-07-22 14:01:47 +00:00
a1a6b4200e
feat(windows): define native authority boundary
2026-07-18 04:50:24 +00:00
0ac418dd8b
fix(ghidra): preserve Windows batch invocation semantics
2026-07-17 03:05:19 +09:00
bc0fb45f16
feat(ghidra): launch bounded Windows headless sessions
...
Invoke analyzeHeadless.bat through an absolute cmd.exe with fixed interpreter switches, quoted arguments, delayed expansion disabled, and fail-closed metacharacter and length checks. Isolate Windows home and temporary coordinates, hide provider windows, and terminate the P0 launcher tree through bounded taskkill cleanup. Advertise explicit limitations that this preview does not provide Job Object ownership, DACL enforcement, reparse-point authority, or hostile-target safety.
2026-07-17 03:05:19 +09:00
f0e625d7ee
feat(ghidra): add private headless provider session
2026-07-16 01:27:54 +09:00
70e1a0f532
refactor(process): extract reusable provider lifecycle primitives
...
Introduce provider-neutral ownership, private runtime roots, absolute startup deadlines, pending-operation correlation, bounded output capture, and verified TERM-to-KILL process supervision.\n\nMigrate Hopper onto the shared lifecycle pieces while keeping its Unix-socket protocol and health/shutdown parsing adapter-specific. Preserve exact ownership checks and fail-closed cleanup, including descendant cleanup after the launcher leader exits.\n\nAdd reusable process fixtures and deterministic coverage for startup timeout, cancellation, output bounds, exit diagnostics, cleanup escalation, repeated close, spawn failure, and resource disposal. Update architecture, provider evaluation, contributor guidance, and generated API documentation.
2026-07-15 23:20:48 +09:00
morluto
N0zoM1z0