rea/release-notes.md

🤖 I have created a release beep boop

6.5.0 (2026-10-13)

  BREAKING CHANGES

• runtime: attached fields in JavaScript runtime, browser, and Electron target discovery and inspection results may be null when discovery does not report attachment state.
• sourcemaps: Browser source-map original and mapping rows expose null for unavailable source names instead of inventing an unknown-source string. New index fields are optional when reading older retained evidence.
• analysis: get_call_graph normalized_result now contains { graph, limitations }; traversal-depth groups are under graph.
• mcp: binary_session no longer includes server_identity.catalog.tools; tool_availability and provider capabilities use grouped facts documented in docs/mcp-contracts.md.

Features

• add Frida instrumentation support (#1359) (4a4ae9b)
• analysis: add opt-in retained inventory and WASM views (#2122) (58fb372), closes #2016
• android: add opt-in package summaries and retained manifest views (f254f5a)
• browser: inspect retained aioquic qlog JSON captures (bb154d1)
• captures: discover installed protocol and field definitions (#2496) (9c34c09)
• captures: inspect recorded packets with bounded TShark delivery (#2318) (f611d8c)
• clients: register Qoder CLI during setup (#1572) (1097693)
• clients: register Trae during setup (#1573) (bfa805d)
• clients: register ZCode during setup (#1564) (51d6c87)
• evm: add retained interface summary delivery (#2308) (f76163c), closes #2016
• fiddler: inspect native SAZ captures (a2d8b94)
• flutter: identify Dart snapshot builds and inspect AOT payloads by pure APK parsing (#1582) (e4d3e13)
• ghidra: admit bounded PSP ELF through installed Allegrex (#1599) (e4407db)
• ghidra: admit relocatable MIPS32r2 ELF objects (#1950) (290d301)
• ghidra: admit RISC-V ELF analysis through a pinned generic lane (#2151) (0baad58)
• ghidra: admit soft-float MIPS32r2 ELF with integer-register float storage (#1949) (5e219de)
• ghidra: admit verified MIPS16 shared ELF images (e9fe643), closes #1851
• ghidra: apply validated analyzer overrides before analysis (9878bb7)
• go: inspect embedded binary build metadata (#1363) (a1b5d51)
• harmony: project HarmonyOS package inventory evidence (#1447) (f2150eb)
• ida: support optional native IDA Free MCP in attached mode (#1544) (d1aaeee)
• javascript: analyze selected application sources (85c1d25), closes #1848
• javascript: recover code-split bundles from multiple inputs (#1686) (12c4160)
• javascript: resolve exact package import aliases (#1862) (d28b41e)
• managed: add retained metadata overview and pages (#2413) (82cfcee)
• managed: select declaring types in inspect_managed_members (a149d18), closes #1878
• mcp: add opt-in paging for retained unknown heads (9a18251)
• mcp: derive an API surface view from retained web network captures (#1891) (880a603)
• native: admit raw binaries with caller-supplied architecture and entry (#1868) (7c207c7)
• native: expose typed incoming references at exact addresses (#1715) (cdd9fe7)
• pcap: add bounded capture summaries through CLI and MCP (9581e06)
• server: frame analysis-target content as untrusted data (#1908) (85e1242)
• setup: register DeepSeek Harness through setup, doctor and uninstall (#1929) (d9d2a17)
• signals: decode recordings with bounded sigrok output (#2339) (91b8f58)
• signals: discover installed decoders and option help (#2487) (4276aaf)
• sqlite: inspect offline snapshots with selective evidence (#2271) (aeee507)
• target: explain static WASM inspection after native rejection (1f17ac8), closes #1852
• update: update Bun global installations (#1735) (e4027e4)
• wasm: add opt-in first-call summary delivery (#2193) (0b71453)
• wasm: inspect local artifacts with WABT (#1533) (ffaf2c1)
• website: add a persistent light and dark theme switch (4773c15)
• website: add multilingual editions and translation workflow (a2d3338)
• website: follow the system dark mode and fix small-screen text (#1894) (12ee785)

Bug Fixes

• adb: admit canonical device states and preserve malformed output (e1cd292)
• adb: count requested permissions that the device marks restricted (#2359) (15463bd)
• adb: count UTF-8 bytes in logcat total_bytes (#2212) (ec2d251)
• adb: evaluate the full activity start report (c89972c), closes #2225
• adb: preserve device paths and prevent destination collisions (55b6148)
• adb: preserve directory identities and share byte capture (3bdc873)
• adb: preserve existing bugreport archives (#2221) (d80b55e)
• adb: reject unsafe host file names when pulling one device file (#1962) (1d4c4eb)
• adb: share actionable provider configuration refusals (c42232f)
• adb: share host configuration refusals with apktool (#1954) (39418ea)
• align MCP archive contracts and documentation (#2478) (a86deec), closes #2454
• analysis: expose provider image base (#2083) (81cca2e)
• analysis: preserve producer identity and partial evidence (6fb3a34)
• analysis: preserve relationship coverage across evidence and replay (9c85114)
• analysis: scope call-graph caveats to their observed relationships (5dfb9d0)
• android: bound inline search Evidence with retained inventory provenance (#1890) (7a0140b)
• android: preserve decoded values and duplicate class inventories (0677468), closes #1978
• android: preserve executable static initializer evidence (#1876) (efbc25f), closes #1846
• android: reject malformed UTF-8 at the JADX protocol boundary (fe8d0bd)
• apktool: accept --no-strings CLI option (#2707) (11f8b76)
• apktool: name host requirements in configuration refusals (#1946) (7cdb798)
• apktool: run Windows batch launchers through cmd.exe (#1777) (ae95e68), closes #1774
• apple: decode UIKit keyed-archive outlet connections (8d4d631)
• apple: derive dyld environment findings from each traced slice (#2733) (52d4ce6), closes #2661
• apple: join recognized keys from NIBArchive field maps (#2248) (fd985db)
• apple: limit already-loaded reuse to rpath dependencies (#2292) (60f771a)
• apple: preflight XML plist nesting before keyed archive decoding (#2161) (7711b00)
• apple: preserve archive signatures and metadata byte identity (dc038d1)
• apple: preserve ARM64E X1 architecture identity (f598bab)
• apple: preserve slice identity and macOS boundary diagnostics (#1772) (5c29565)
• apple: validate build-version tool records within cmdsize (#1784) (817aef4)
• artifacts: authenticate file subjects across provider and view boundaries (3c57e1a)
• artifacts: bind directory reads to captured file state (918713a)
• artifacts: bound archive decompression by source size (#2144) (c59fbf5)
• artifacts: close mounted directory resources before DMG detach (2260887)
• artifacts: compare leaf inventories using explicit coverage (ed485a3)
• artifacts: compare package signatures without ASCII folding (#2069) (75a4a14)
• artifacts: count a changed partial-inventory root once (#1854) (ee5275c), closes #1844
• artifacts: distinguish Java classes from universal Mach-O (921bb95), closes #2317
• artifacts: honor cancellation at the output publication boundary (e7882b3)
• artifacts: mark Windows host executables by extension (#1823) (91f843b), closes #1819
• artifacts: mark Windows launchable files as host executables (#1824) (e8491e0), closes #1819
• artifacts: preserve decode coverage and cleanup ownership (a73a55f)
• artifacts: preserve emitted ZIP entry identity (e36c82b)
• artifacts: preserve inventory uncertainty in application projections (d8ceb3f)
• artifacts: preserve NIB field and class identities (#2106) (f8e9579)
• artifacts: preserve physical ZIP member identities (#1865) (bcd350c), closes #1860
• artifacts: preserve ZIP identities and partial managed metadata (74d7da6)
• artifacts: read ASCII control bytes in legacy ZIP names as ASCII (#2365) (9928f35)
• artifacts: read every ZIP package family extraction is asked to open (#2493) (7017c4d)
• artifacts: reject malformed serialized keys and integer values (9435c7a)
• artifacts: retain ASAR resources through cleanup failures (eb97da3)
• artifacts: retain read cleanup ownership through CLI and MCP shutdown (b955b82)
• artifacts: retry transient DMG verification refusals (bb54082)
• browser: bound CDP discovery response size and lifetime (951b095)
• browser: compare only observed HTTP response facts (486b567)
• browser: compare PNG IHDR bytes without ASCII folding (#2099) (fdd8f82)
• browser: exclude sensitive binary lengths from historical captures (#2477) (68ecf3d)
• browser: isolate script URLs with empty query or fragment (#2074) (9b780c4)
• browser: keep elapsed capture timing independent of wall-clock changes (6bd2b28)
• browser: preserve attached service-worker policies and ownership (221c856)
• browser: preserve body API provenance through script export (966f7cc)
• browser: preserve uncertainty in malformed network observations (a8d4984)
• browser: redact encoded declared secrets consistently (f09bb8a)
• browser: report mismatched event family selection as unknown in capture comparison (#2239) (0043d9b)
• browser: retain effective source-map response urls (062723e)
• browser: retain module resolver cleanup ownership (a82e37c)
• build: preserve LF text checkouts on Windows (#1807) (031d778)
• build: preserve resource controls in strict Turbo tasks (#1809) (2e22330)
• build: resolve rolldown from the npm registry in package-lock.json (#1986) (f889a69)
• bun: report the real runtime and enforce worker memory budgets on Windows (#1730) (66c2157)
• call-path: preserve relationship coverage from analysis (#2001) (ed6af7e)
• captures: name the violated HAR schema constraint (#2708) (b69d20a)
• checks: order artifact-backed lint after compilation (0d5033a)
• ci: align FAT fixtures and consolidate duplicated workflow helpers (a0317cf)
• ci: allow cold Chrome startup in runtime fixtures (f941968)
• ci: ignore generated website translation staging (#2511) (1883149), closes #2508
• ci: keep cancellation ownership in the calling workflow (db3c9f0)
• ci: reject incomplete verification plans (bd2c202)
• ci: stop aggregate jobs when verification is cancelled (2e45b4d)
• cli: await browser scenario cleanup on interrupts (aaeadf2)
• cli: normalize empty Windows profile before imports (#2482) (fa4b828)
• cli: preserve failure semantics across full-output formats (570c40c)
• cli: report an invalid REA_LOG_LEVEL as configuration (#2140) (3159732), closes #2135
• cli: retain browser and Inspector input correction details (#2230) (916ac97)
• cli: retain correction details across adjacent browser commands (#2294) (bb26622)
• cli: retry retained browser scenario cleanup (4daea94)
• cli: reuse firmware and web module input constraints (48c352b)
• config: reject NUL bytes in Hopper loader arguments (#2474) (a07ceae)
• contracts: mark foreign execution and device mutation destructive (#1904) (0b7fc40)
• contracts: reject OS-invalid local paths in binary and artifact tools (#1925) (976c2c0)
• dev: preserve command arguments in exclusive runners (fd95880), closes #2319
• docs: synchronize disclaimer links across translations (d864ad5)
• docs: validate translated README website destinations (c9136ee)
• domain: preserve derived byte counts and uncertain identity (7a2cd1e)
• domain: preserve retryable capability failures through redaction (#2494) (d73ed6f)
• electron: attribute unresolved paths to selected inputs (b7169c8), closes #2272
• elf: centralize fixed header validation across consumers (34a4bb6)
• errors: stop recommending retries for non-retryable failures (#1869) (fb94d9d)
• evaluation: authenticate delivered Evidence citations (844fa52)
• evaluation: share completed transcript facts across graders (1447fd2)
• evidence: admit bundle imports across session transitions (#2303) (1230381)
• evidence: authenticate identities and retain extraction provenance (6bae774)
• evidence: enforce managed identity and cancel bundle reads (3bcc68c)
• evidence: normalize unknown revisions and preserve mutation intent (#1733) (2165045), closes #1723 #1724
• evidence: preserve call coverage in function comparisons (049132a), closes #2222
• evidence: preserve literal keys and response body ownership (d1dcebc)
• evidence: preserve trace uncertainty and partial provider observations (e997085)
• evidence: reject NUL bytes in subject and snapshot paths (#1873) (fa9a7e5)
• evidence: reject unsupported metadata before authentication (acf75e6)
• evidence: retain unreadable PE and Darwin process facts (4a4d36f)
• evidence: validate closure projections and browser body coverage (aada0ca)
• filesystem: enforce symlink and decoded-text admission (ec0b081)
• firmware: name missing extractor dependencies in partial extraction (#1879) (1769417)
• formats: preserve high bits in Windows signature checks (ac57c88)
• frida: name the argument each Frida input error rejects (#2217) (86de439), closes #2213
• frida: reject an unreadable script file before starting a session (#2211) (c9aecde)
• ghidra: derive installation admission from Java property semantics (2187e16)
• ghidra: encode Java probe output as UTF-8 (#2206) (59be866)
• ghidra: keep JVM warnings out of LaunchSupport output (#1698) (e20994a)
• ghidra: recover stale clients on same-target reopen (#2014) (4573e8c)
• ghidra: report progress while startup is pending (#1877) (29d2624)
• ghidra: resolve file offsets in decompile (#2101) (2995ec6)
• ghidra: retain launcher command outcome in launch failure diagnostics (#2011) (d4e8ef7)
• ghidra: share Java properties semantics with PSP extension admission (b953f96)
• go: accept file-backed unmapped Mach-O debug segments (7fb097d)
• honor empty URL query and fragment markers (#2091) (af29247)
• hopper: let failed one-shot commands exit while retaining a lease (#1763) (e8528ce)
• hopper: preserve observed process failures across requests (#1927) (601814e)
• hopper: preserve startup failures and recover denied launches (069308b), closes #1808
• hopper: stop Linux demo children when the REA owner exits (#2499) (c105391)
• hopper: wait for late bridges during cleanup (#1866) (cf7477e)
• ida: declare GUI navigation for attached legacy analysis (#1764) (cf69207), closes #1712
• ida: preserve native coverage and verify returned values (#2324) (37b7550)
• ida: preserve non-x86 call edges and workflow uncertainty (#1906) (0ae38e1)
• ida: recover cleanup after worker sessions are reaped (12fa8fd)
• ida: report a procedure IDA cannot resolve as invalid input (#1785) (d3e9ee5)
• ida: stop the private input of a universal Mach-O at the end of the selected slice (#2291) (c6acd19)
• ida: thin the selected FAT slice into the private headless input (#2201) (10400fd), closes #2139
• ida: wait out a transient busy worker health in headless sessions (#1778) (0bdc7a4)
• install: describe automatic setup and guard truncated downloads (#1902) (d802304)
• install: honor redirected setup diagnostics (8b18171)
• io: consolidate managed snapshots and retain cleanup ownership (98d8470)
• io: retain cleanup ownership and honor cancellation (d8c76b6)
• javascript: apply loader-owned module lookup rules (c0904b4)
• javascript: bound self-alias mutation paths that never prune (e365f37)
• javascript: bound value evaluation through nested closure aliases (#1941) (d59ab6d)
• javascript: centralize module syntax and separate erased type dependencies (1b95302)
• javascript: distinguish file URL paths from query identity (f43fc02)
• javascript: follow actual receivers in nested intrinsic calls (#1912) (9d8e42b)
• javascript: follow bundler namespace interop for Electron APIs (#1827) (6ac5c36)
• javascript: honor package exports before sibling files (3ad5782)
• javascript: index repeated graph observations before final sorting (6d5d71f), closes #1748
• javascript: keep TypeScript substitution out of runtime paths (f8513a4)
• javascript: normalize package URLs before array selection (#1916) (369cd3d)
• javascript: parse explicit CommonJS wrapper syntax (#2475) (6a04f92)
• javascript: preserve and resolve complete source-map URLs (#1788) (ce845ba)
• javascript: preserve cancellation through recovery publication cleanup (eaa9616)
• javascript: preserve execution and invocation provenance (b8fab74)
• javascript: preserve graphs within parent capacity (#1921) (0485cd3), closes #1911
• javascript: preserve import-equals declaration and export evidence (#2062) (86fab11)
• javascript: preserve loader-specific package ancestry (9f67e44)
• javascript: preserve namespace re-export relationships (#1833) (37a9eb9)
• javascript: preserve package and source-map boundary identity (#1939) (14935e4)
• javascript: preserve POSIX runtime path case on Windows (#2422) (1a1b67c)
• javascript: preserve TypeScript loader and dependency semantics (e4532b5)
• javascript: preserve unknown module-alias provenance (c7a890d)
• javascript: prove namespace interop before attributing Electron APIs (#1857) (9b3e598)
• javascript: report available parent result budget in coverage limits (#1915) (72489a9)
• javascript: report JSON status for imported package manifests (914ba83)
• javascript: resolve bundled exports by binding identity (5ab0cbb), closes #2171
• javascript: resolve module-relative Worker URL references (#2104) (653067d)
• javascript: resolve relative ESM URLs as exact files (783fcb0)
• javascript: retain compiler-dependent module resolution facts (c923fb0)
• javascript: retain completed facts through cancellation (#1934) (b6651cb)
• javascript: retain distinct chunk registration callback metadata (#2737) (0cf224e)
• javascript: retain guards without duplicating observed IPC calls (42b0ed1)
• javascript: retain unbound CommonJS semantic imports (3a17882)
• javascript: retain wrapped isolated-world bridge exposures (1c37914)
• javascript: share source-map resolution and preserve path uncertainty (3ae826c)
• javascript: share TypeScript emitted import resolution (1dfb933)
• javascript: trace wrapped Electron IPC paths in large bundles (#1874) (87b9793)
• jeb: confine an invalid REA_JEB_MCP_URL to the JEB tools (#2145) (df2c08b), closes #2143
• managed: admit ReadyToRun images built for non-Windows hosts (#1985) (0d11f71)
• managed: bind row budget charges to metadata identities (#1897) (23d50ea), closes #1878
• managed: bound transient CIL by decoded instruction count (#1822) (554cb45)
• managed: charge retained member facts instead of decoding bounds (#1768) (3078729)
• managed: charge transient CIL by decoded instructions (554cb45)
• managed: decode generic, array, fnptr, and modifier signatures (#1835) (1f531fc)
• managed: distinguish .NET Standard targets from runtimes (81dc64e)
• managed: honor metadata ExtraData before table decoding (#1893) (fb43dd9)
• managed: index attribute constructor owners once per layout (#1943) (c2cf7dc)
• managed: preserve negative zero in CIL operands (#2437) (6c816af)
• managed: report ExportedType rows in managed member inspection (#1828) (ed1519d)
• managed: report malformed PE layouts as invalid input (#2194) (90e37f4)
• managed: resolve member ownership through pointer tables (#1886) (a95795c)
• managed: share first-match member list ownership (#1955) (7d92d93)
• managed: share first-match member ownership indexes (52e76c5)
• managed: validate CLI type selections with the member contract (#2125) (60259a9), closes #2121
• mcp: cancel evidence imports before session mutation (e5699d2), closes #1746
• mcp: express inspect_analysis_view selector constraints in the contract schema (#1705) (a8a9c4d), closes #1695
• mcp: join owned doctor shutdown without signaling saved PIDs (7fc0b5e)
• mcp: keep prompt completion within ready provider sessions (07b36c1)
• mcp: keep shared optional providers open across discarded probes (#2205) (7c9c1eb), closes #2195
• mcp: preserve target provenance on retained partial errors (8fc2043)
• mcp: provide native evidence paging continuation (1449e8e), closes #1849
• native: accept universal binaries with LIB64 x86_64 slices (#1982) (4b653fe)
• native: clarify Mach-O offset origins and reject partial ELF tables (8bd5ba2), closes #1973
• native: honor Mach-O chained pointer locations and library ordinals (#1709) (3b0ea59)
• native: name the ownership helper prerequisite in command failures (#2506) (20f51d7)
• native: name the retained pwntools process group in cleanup resources (#2281) (4303dcd), closes #2274
• native: preserve literal line breaks in signing identifiers (#2107) (ec3db37)
• native: preserve universal Mach-O container identity (b38429c)
• native: raise default PE resource entry budget to 16384 (#1703) (951c2aa)
• native: rank Mach-O slices by parsed CPU subtype (c02fb0e)
• native: reject ambiguous otool load-command framing (108b5f9)
• native: reject required otool fields truncated before their value (#1995) (adde8a8)
• native: retain failed command cleanup owners (d9b4ae1)
• native: retain failed pwntools process and runtime cleanup (#1708) (11fe5a1)
• native: retain signature snapshot cleanup ownership (ebc22d9)
• native: select one slice when universal Mach-O slices share a CPU type (#2040) (96fc84f)
• order remaining outputs independently of host locale (#1867) (e4ac7bb)
• pcap: name the host tool to configure in capability refusals (#2507) (bb96afd)
• pcap: order evidence ties by code point instead of host locale (#2509) (f6556ad)
• plist: decode formatted XML dictionary keys (f1924cf)
• process: accept a trace identifier the comparison result can represent (#2488) (2c6a4fa)
• process: add an opt-in Swift module cache (#2252) (47a51b0)
• process: aggregate incomplete trace-spec diagnostics (857a1b7)
• process: align capture Evidence provider admission (713db4d)
• process: bound retained trace ordering state (63e796d)
• process: cancel run-token reads during sampling (09b6828)
• process: observe already-due trailing callbacks before settling the capture journal (#1700) (ed084b3), closes #1697
• process: preserve invalid runtime path selections as input errors (cecc6ec)
• process: preserve monotonic capture timing and observed wall dates (9049dba)
• process: preserve nested path identities during normalization (#2468) (b9ee921)
• process: reject deep trace cycles without recursive expansion (10935b7)
• process: report single empty settlement observation as unverifiable (#2232) (7724edb)
• process: report the Swift compiler outcome with bounded diagnostics (#1999) (091cb81)
• process: retain owned command cleanup diagnostics (#1907) (38539a2), closes #1856
• process: return private runtime ownership at allocation (c22111e)
• process: use monotonic time for provider execution budgets (d9e9fb2)
• progress: measure delivery intervals with a monotonic clock (ed881c6)
• providers: retain native parsing and compiler failure diagnostics (b5ededd)
• readiness: validate stage evidence references once (02cedc3)
• reconstruction: resolve latest verifier observations without input-order bias (1f7f808)
• reference: report sloppy scripts, PHP, C# and enclosing Git facts (#1770) (7b15762)
• reference: verify symlink identity around target reads (3d83135)
• runtime: preserve unknown debugger attachment state (e55ef72)
• screenshot: reject invalid PNG header dimensions (#2472) (e74e4e9)
• scripts, install: honor test:fast "without build" promise and orient Node.js engine mismatches (#2026) (69e097a)
• scripts: pass MCP callTool timeouts as request options (#2387) (c462a4e)
• session: attribute selected-provider capabilities to the resolved identity (#2013) (2ff850d), closes #2009
• session: invalidate snapshots before metadata write dispatch (1c64fe3)
• session: verify retained client liveness on open fast path (e59db2f)
• setup: configure an empty Hermes config.yaml (#1983) (43f9c39)
• setup: honor config roots and display terminal dry-run plans (2397137)
• setup: ignore empty home directory selections (c339f9e), closes #2325
• setup: name each skill directory in the uninstall summary (#2118) (5190843), closes #2111
• setup: name invalid client config shape errors clearly (#2157) (b1bf4a7)
• setup: name structural problems in client configurations (#2154) (51367ca), closes #2152
• setup: pin Hopper's macOS publisher identity before install (#2481) (650237e)
• setup: preserve Cordis ownership across uncertain patch structure (21eff3b)
• setup: preserve current recovery snapshots and decoding failures (f6775a3)
• setup: preserve skill files and report rollback failures (c240768)
• setup: preserve unrelated Hermes YAML line formatting (58e91e1)
• setup: register a stable launcher when run through bunx (#1731) (d412def)
• setup: remove emptied skill directories on uninstall (#2182) (d350357)
• setup: retain regular-file cleanup ownership through workflows (dcfc5d4)
• setup: retain symlinked data roots during uninstall (#1821) (7e2f79a)
• setup: verify independently selected skill destinations (bb50813)
• snapshot: bind replayed subjects to the selected target path (c002b89)
• snapshot: classify non-object roots as invalid content (#2685) (9cf49c7)
• sourcemap: retain named originals beside unknown source names (83a4445)
• sourcemaps: preserve nullable source declarations (ee50ed1)
• target: recognize binary plists by magic under any extension (#2133) (672bdea), closes #2129
• targets: project invalid raw-binary loads as caller input (#2004) (edf4624)
• targets: recognize Windows headers after short DOS stubs (c9fed50)
• targets: remove path advice for format refusals (f28f338), closes #1979 #1852
• test: audit static Wasm and Harmony tool wording (#1917) (dfe3117)
• test: wait for Hopper reconnect listener readiness (#1885) (d3e83b0)
• uninstall: label YAML configuration syntax failures correctly (94153f1)
• update: resolve Bun global directories before changing cwd (e90acae)
• update: share parsed client activation with maintenance (b045df1)
• wasm: accept unpadded WABT section rows (#1963) (9eee709)
• wasm: inspect modules whose custom section names contain NUL (#1981) (1febc22)
• wasm: preserve debug module names in WABT output (#1967) (b777e5d)
• wasm: preserve leading BOM in custom section names (#2102) (abc8c6d)
• wasm: stop appending WABT remediation to unrelated runtime-root failures (#2084) (ea2f94d)
• web: reject NUL bytes in web tool local path inputs (499ac18)
• website: clarify translated evidence and runtime observations (f1f5582)
• website: clarify translated terminology and RTL flows (a956275)
• website: incorporate multilingual contributor refinements (d981a58)
• website: keep omitted language selectors free of whitespace (8583a19)
• website: prioritize getting started across language editions (8cbd57c)
• windows: bring the real Windows Ghidra verifiers up to date (#1863) (ea40f71)
• windows: preserve caller affinity only within one processor group (#2202) (ab62ee9)
• windows: preserve transient runtime admission failures (#2467) (1724077)
• windows: retain failed native inspection ownership (#1826) (0b4ce83)
• workflows: retain staged output ownership and cancellation semantics (7285e15), closes #1968

Performance Improvements

• browser: parse captured module URLs once per lookup (#1829) (ca11162)
• ci: share bytecode across fresh Apple artifact subprocesses (ba7df3f)
• cli: bundle runtime entries to reduce Windows startup I/O (#1996) (d93fbda)
• cli: defer command-specific analysis implementations (a4dd4e8)
• cli: defer command-specific modules until dispatch (a82d14e)
• domain: avoid duplicate readiness bundle validation (29ff887)
• evidence: authenticate and seal imported bundles in one pass (b123b2e)
• evidence: fuse streamed JSON token handling (#1694) (13e03e9)
• evidence: reuse authenticated comparisons through aggregation (26bffb9)
• evidence: reuse authenticated file snapshots during session import (#1721) (966dc3a)
• evidence: reuse authenticated unknown mutation snapshots (042dcaa)
• flutter: add opt-in retained AOT summary and string pages (23de4f7)
• frida: evict captured messages without copying the whole queue (#2628) (6a05248)
• ghidra: compile bundle activator with bridge scripts (#1931) (0f4992f)
• javascript: index source-map ignore lists per leaf (#1905) (898d509)
• javascript: reuse collected callable identities for returns (d3088c3)
• javascript: skip nested callables during fingerprint traversal (#1871) (097f0d5)
• javascript: skip the repeated-prefix scan on first capture visits (#1789) (41544fb)
• mcp: bundle internal modules to reduce Windows startup I/O (76e4153)
• mcp: compact repeated session discovery facts (#1988) (6395e8d)
• mcp: keep Playwright and type-only imports off MCP startup (#1691) (0ecf3f2)
• mcp: reduce Windows startup module resolution (#1814) (76e4153)
• native: add opt-in Mach-O summary delivery and retained pages (#2634) (bf34d0d)
• native: run independent Mach-O slice commands concurrently (#2466) (2c7240c)
• snapshot: restore large legacy caches within live memory bounds (092de8f)
• test: batch compatible client profile lifecycles (0153b4d)
• test: reuse CLI boundary worker module graphs (f178bf1)
• test: reuse the CI scope Git baseline (ef5f9aa)
• tests: consolidate TypeScript dialect producer checks (01762b1)
• test: share stdio analysis for comparison fixtures (43dafb5)
• tests: remove timed output and synchronize browser fixtures (693ed33)
• tests: reuse stateless workflows and immutable fixtures (5f4c7ff)

Code Refactoring

• evm: bind offline analysis through a static descriptor (ad08510)
• javascript: reuse validated source-map decoding (f64790b)
• mcp: trust validated inputs and tighten contract fixtures (2646150)
• prune obsolete provider and verification code (e198793)

Documentation

• add responsible-use disclaimer (4a5aec8)
• agents: require brittleness review before resolving threads (0365454)
• agents: require related brittleness cleanup in bug fixes (0d8b728)
• celebrate 110,000 GitHub stars <‰ (#2042) (0d78c99)
• celebrate 170,000 GitHub stars <‰ (#2462) (9188698)
• celebrate 80,000 GitHub stars <‰ (#1752) (6ff4d4a)
• celebrate 90,000 GitHub stars <‰ (#1858) (5876779)
• clarify ownership and interpretation boundaries (64b71b1)
• clarify responsible use and preserve third-party notices (#2082) (974f11d)
• cli: add a managed assembly inspection workflow (#2037) (538f8cc)
• correct drift and reorganize English guides (#2207) (7ae3c50)
• define contribution scope and simplify proposal forms (ac6ef95)
• define performance priorities for analysis workflows (#2245) (8e00452)
• ghidra: verified macOS arm64 native decompiler build recipe (#2112) (5f79c85)
• ghidra: verify and document the macOS arm64 native decompiler build (5f79c85)
• i18n: celebrate 80,000 GitHub stars in translated READMEs (#1758) (953a0ce)
• install: explain Claude Code upfront tool loading on third-party endpoints (#2029) (d024928), closes #2019
• preserve the native guide title anchor (#2224) (ae41265)
• readiness: align required stage identifier and checks with evaluator (#2200) (85c5477)
• readme: remove CI badges from translations (3298219)
• readme: remove CI status badge (b07e54a)
• setup: confirm published 6.4.0 client support (57c5aca)
• shorten responsible-use notices across languages (fa87dd2)
• sync French, Indonesian and Italian READMEs with English (#1861) (96547d3)
• website: add essay on reverse engineering models (fe496bd)
• website: highlight the setup guide on the homepage (#1714) (8be7ad4)
• website: improve model essay transitions and narrative flow (ca07373)
• website: publish model essay in all supported languages (3d78a57)
• website: simplify reconstruction evidence in model essay (b06751b)
• website: use straight quotes in model essay (806ff57)

Tests

• analysis: verify real preset snapshot and cleanup boundaries (#2349) (1dd20ce), closes #2016
• android: verify duplicate class inventory behavior on empty discovery queries (#1984) (6611bcf)
• apple: consolidate keyed archive integer verification (#1933) (3b490a7)
• apple: keep the same-named slice dyld fixture openable on x64 hosts (#2755) (fb28ec1)
• apple: skip ibtool-compiled NIB tests when Xcode ibtool is unavailable (#2070) (7bc57e1)
• architecture: consolidate import boundary verification (2976fac)
• bound CLI validation subprocess concurrency (ff57b75)
• ci: stabilize JADX recovery and ignore generated reports (#1668) (0a6b46d)
• classify filesystem and process workflows by boundary (c2b56e3)
• classify filesystem application workflows as boundaries (804c287)
• cli: align reference import failure envelopes (8224aeb)
• cli: cache subprocess compilation within each worker (6bcfeb0)
• cli: consolidate development runner workflow coverage (16f5ded)
• cli: consolidate schema coverage and assert input refusals (beb80a0)
• clients: verify native Claude Code integration on Windows (#1926) (c32d846), closes #1923
• clients: verify native Gemini CLI integration on Windows (#1936) (04089d5)
• cli: preserve Windows runtime paths and failure diagnostics (79156e5)
• docs: type README drift scenarios as fixed pairs (6e38529)
• evidence: cover workflow question whitespace normalization (#1739) (b2da21a)
• evm: verify real worker cancellation and cleanup recovery (#2404) (ae80513)
• evm: verify static descriptor bindings before use (#2427) (4f4f6cd)
• ghidra: require pending multi-HI16 coverage in the real MIPS relocatable lane (#1974) (eaf88ac)
• ghidra: restore complete installation fixtures across CI boundaries (18d56f5)
• hopper: align startup fixtures with cleanup and lease contracts (b3dec00)
• hopper: repair Linux demo setup and native verification (#2638) (141d209)
• ida: expect direction in combined call coverage (4dd44dd)
• javascript: classify artifact workflows as boundary tests (dc303a8)
• javascript: consolidate module lookup regressions (#2031) (783fcb0)
• javascript: expect unknown parameter provenance (e05d339)
• javascript: verify CommonJS file URL boundaries via CLI and MCP (#2061) (6ce5903)
• managed: use the current attribute fixture contract (6407718)
• mcp: align completion checks with provider readiness (fe4b94a)
• mcp: fix three MCP boundary suites on native Windows (#2312) (a97b713)
• mcp: preserve coverage in unchanged function fixtures (3ee6ff4)
• mcp: ready providers before live prompt completion checks (#2137) (621cee1), closes #2123
• mcp: reuse advertised schema in inventory check (#2469) (a6efa4f)
• native: replay complete dylib-use provider output (89f5e48), closes #1970
• native: skip the DMG EACCES diagnostic as root (#1584) (262efe6)
• native: skip the EACCES directory diagnostic as root (#1394) (40d9c7b)
• native: skip the inaccessible-directory diagnostic as root (#1900) (d0edeec)
• native: verify real PE and DOS entry views (1770f38)
• pcap: run the missing-path refusal only where captures are admitted (#2510) (1991542)
• perf: distinguish Codex tool context and token accounting (#2416) (ee87111)
• perf: observe owned counters at payload completion (ca2d15b)
• perf: verify existing SQLite column selection on QGIS data (#2489) (45984a4)
• reference: scope cleanup faults to the owned source file (#2430) (eeba618)
• release: validate only the selected preflight job (747e729)
• reuse application analysis across comparison directions (044c0a9)
• reuse identical JavaScript analysis fixtures (42951bb)
• reuse validators for identical MCP schemas (85ccef3)
• share native keyed archive integer fixture generation (847a1a3)
• sourcemap: consolidate source map regressions (#2034) (83a4445)
• sourcemaps: assert semantic evidence and actual output admission (bd74c7a)
• strengthen archive and resource cleanup assertions (5ba1642)
• strengthen public input and module lookup controls (b7f563e)
• web: remove duplicate path schema cases (b5b7301)

Continuous Integration

• balance test shards and reuse package download caches (40b37ae)
• bound core job execution time (9f3f392)
• finish main validation and balance complete test costs (f0f0995)
• fix PR metadata triggers and defer expensive runner work (3af8f84)
• keep validation fresh and preserve failed-shard reports (#2210) (428eee0)
• narrow native-host lane selection and reuse build caches (#2131) (4f46eac)
• observe affected-owner test plans against full results (fa0a9b2)
• parallelize native verification and share test artifacts (91f6840)
• raise duplication threshold to 3.5 percent (11f1d95)
• reduce macOS runner contention (3f4ea32)
• reduce redundant compatibility and qualification work (d13c9f8)
• reduce reporter fan-out and preserve shard history (ab02f3c)
• reuse current-run builds across provider lanes (490a285)
• reuse portable build cache in native package jobs (8fa1175)
• reuse portable Turbo outputs across verification runs (a00c34d)
• scope timing helpers to portable verification (c8d861f)
• separate fast feedback from full qualification (0c7f4df)
• summarize static checks and retain complete reports (#2242) (d96550f)

---

This PR was generated with Release Please. See documentation.