Deliver complete Evidence directly through MCP with required nullable analysis profiles and immutable per-server delivery settings. Bind selected environments at construction and require typed cleanup outcomes with retained retry ownership. Remove test-only routing, duplicate session and snapshot metadata, producer-field repairs, and ambiguous provider arguments. Separate artifact byte identity from occurrence classification and retain typed source-map and partial native facts across CLI, MCP, and verifier consumers. BREAKING CHANGE: obsolete Evidence envelopes, session aliases, incomplete snapshots, and missing normalized producer facts are no longer accepted. |
||
|---|---|---|
| .. | ||
| 0001-provider-selection-and-analysis-profiles.md | ||
| 0002-controlled-replay-authority-and-sandbox.md | ||
| 0003-managed-code-evidence-and-provider-boundary.md | ||
| README.md | ||
README.md
Architecture decision records
Accepted decisions describe the architecture that implementation PRs must follow. Acceptance does not by itself mean the behavior is shipped; each record states its implementation status separately.
| ADR | Status | Implementation |
|---|---|---|
| 0001: Provider selection and analysis profiles | Accepted | Provider selection and 25 read-only Ghidra operations on Linux/macOS and experimental Windows x64 P0; Linux/macOS session annotations |
| 0002: Controlled JavaScript replay authority and sandbox policy | Superseded | Historical design; the controlled JavaScript replay tool was removed |
| 0003: Managed-code evidence and provider boundary | Partially superseded | Seven static managed tools remain; runtime planning removed |