Admit only native x86-64 PE applications when the Ghidra candidate runs on Windows while preserving the existing Linux format matrix. Add precise rejection codes for executable roles and managed targets, publish a machine-readable Windows capability report, and keep missing no-follow, ACL, Unix-socket, and PTY controls as independent observations rather than inferred support. |
||
|---|---|---|
| .. | ||
| 0001-provider-selection-and-analysis-profiles.md | ||
| 0002-controlled-replay-authority-and-sandbox.md | ||
| 0003-managed-code-evidence-and-provider-boundary.md | ||
| README.md | ||
README.md
Architecture decision records
Accepted decisions describe the architecture that implementation PRs must follow. Acceptance does not by itself mean the behavior is shipped; each record states its implementation status separately.
| ADR | Status | Implementation |
|---|---|---|
| 0001: Provider selection and analysis profiles | Accepted | Foundation shipped; capability work continues |
| 0002: Controlled JavaScript replay authority and sandbox policy | Accepted | Linux x86_64 extracted-module replay shipped |
| 0003: Managed-code evidence and provider boundary | Accepted | PE/CLI triage shipped; deeper contracts planned |