Kaoru0822andClaude Opus 5.5 ce8e969112 fix(native): require Apple origin for platform facets and keep cancellation ...

- Treat a CodeDirectory platform identifier as a platform binary only when
  the signature satisfies `anchor apple`, checked with
  `codesign --verify -R="anchor apple"`; otherwise the dependent facets are
  unknown. Developer ID code chains to Apple Root CA but fails this check.
- Report every security facet as unknown when architecture slices differ in
  signing state.
- Map an aborted signal that escapes a native helper, such as ticket
  hashing, to AnalysisCancelledError instead of an output error.
- Treat a target as an app bundle only when it was opened from a bundle
  directory, so a regular file named X.app is verified as a bare Mach-O.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-07 12:43:47 +00:00

..

.vitepress

docs: publish VitePress documentation on GitHub Pages

2026-10-07 16:58:04 +08:00

adr

docs: publish VitePress documentation on GitHub Pages

2026-10-07 16:58:04 +08:00

assets

docs: add Discord community links to README

2026-10-05 17:36:29 +08:00

verification

Merge remote-tracking branch 'origin/main' into feat/signature-posture

2026-10-07 12:37:43 +00:00

android-analysis.md

docs: publish VitePress documentation on GitHub Pages

2026-10-07 16:58:04 +08:00

apple-application-analysis.md

fix(apple): attribute only application-root components in macOS inventories

2026-10-07 10:30:47 +00:00

architecture.mermaid

feat(browser): trace captured website source-map locations (#897)

2026-10-07 16:21:18 +08:00

browser-observation.md

feat(browser): trace captured website module imports (#879)

2026-10-07 14:59:52 +08:00

browser-scenario-contract.md

feat(browser): capture correlated network content and lifecycle evidence (#797)

2026-10-07 04:35:49 +08:00

capability-migration.md

refactor(managed): group capability workflows and verification (#926)

2026-10-07 19:22:04 +08:00

electron-observation.md

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

error-contract.schema.json

refactor!: simplify runtime tools and remove replay engines (#572)

2026-10-05 21:15:04 +08:00

firmware-analysis.md

docs: publish VitePress documentation on GitHub Pages

2026-10-07 16:58:04 +08:00

ghidra-dos.md

fix(ghidra): admit the 12.1 line and the install's JDK range (#840)

2026-10-07 12:24:36 +08:00

ghidra-nativeaot.md

fix(ghidra): admit the 12.1 line and the install's JDK range (#840)

2026-10-07 12:24:36 +08:00

ida-provider.md

feat(ida): add read-only GUI and headless MCP providers (#754)

2026-10-07 01:47:05 +08:00

index.md

docs: publish VitePress documentation on GitHub Pages

2026-10-07 16:58:04 +08:00

installation.md

docs: publish VitePress documentation on GitHub Pages

2026-10-07 16:58:04 +08:00

javascript-application-graph.md

refactor!: simplify runtime tools and remove replay engines (#572)

2026-10-05 21:15:04 +08:00

javascript-application-workflows.md

fix(javascript): keep mutated object initializer values unknown (#752)

2026-10-07 10:51:44 +08:00

javascript-artifact-reconstruction.md

fix(javascript): hash graph and evidence JSON incrementally (#646)

2026-10-06 11:54:55 +08:00

javascript-recovery.md

feat(javascript): recover readable modules with Wakaru (#848)

2026-10-07 12:46:13 +08:00

javascript-runtime-observation.md

docs: clarify onboarding and align provider guidance (#745)

2026-10-06 22:57:36 +08:00

javascript-runtime-reconciliation.md

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

managed-code-analysis.md

chore: merge main and resolve PR #889 conflicts

2026-10-07 17:28:56 +08:00

mcp-contracts.md

feat(evidence): accept exact retained application references (#734)

2026-10-06 20:17:59 +08:00

mcp-prompts.md

fix(target): explain the JavaScript directory analysis route (#733)

2026-10-06 19:53:08 +08:00

native-investigation.md

fix(native): require Apple origin for platform facets and keep cancellation

2026-10-07 12:43:47 +00:00

process-capture.md

fix(process): clarify Windows capture support and recovery (#798)

2026-10-07 04:20:53 +08:00

product-catalog.json

Merge remote-tracking branch 'origin/main' into feat/signature-posture

2026-10-07 12:37:43 +00:00

provider-evaluation.md

fix(ghidra): admit the 12.1 line and the install's JDK range (#840)

2026-10-07 12:24:36 +08:00

reconstruction-obligation-ledgers.md

refactor: return complete analysis results inline

2026-09-29 08:07:24 +08:00

reconstruction-readiness.md

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

roadmap.md

fix(ghidra): admit the 12.1 line and the install's JDK range (#840)

2026-10-07 12:24:36 +08:00

testing.md

fix(native): require Apple origin for platform facets and keep cancellation

2026-10-07 12:43:47 +00:00

tool-design.md

refactor!: simplify runtime tools and remove replay engines (#572)

2026-10-05 21:15:04 +08:00

user-visible-errors.csv

fix(target): explain the JavaScript directory analysis route (#733)

2026-10-06 19:53:08 +08:00

web-source-location.md

feat(browser): trace captured website source-map locations (#897)

2026-10-07 16:21:18 +08:00

website-module-trace.md

feat(browser): trace captured website module imports (#879)

2026-10-07 14:59:52 +08:00

website-script-export.md

feat(web): export captured scripts for JavaScript application analysis (#801)

2026-10-07 05:24:32 +08:00

windows-ghidra-p0.md

docs: publish VitePress documentation on GitHub Pages

2026-10-07 16:58:04 +08:00