morluto
63bf91405c
Deliver complete Evidence directly through MCP with required nullable analysis profiles and immutable per-server delivery settings. Bind selected environments at construction and require typed cleanup outcomes with retained retry ownership. Remove test-only routing, duplicate session and snapshot metadata, producer-field repairs, and ambiguous provider arguments. Separate artifact byte identity from occurrence classification and retain typed source-map and partial native facts across CLI, MCP, and verifier consumers. BREAKING CHANGE: obsolete Evidence envelopes, session aliases, incomplete snapshots, and missing normalized producer facts are no longer accepted.
Architecture decision records
Accepted decisions describe the architecture that implementation PRs must follow. Acceptance does not by itself mean the behavior is shipped; each record states its implementation status separately.
| ADR | Status | Implementation |
|---|---|---|
| 0001: Provider selection and analysis profiles | Accepted | Provider selection and 25 read-only Ghidra operations on Linux/macOS and experimental Windows x64 P0; Linux/macOS session annotations |
| 0002: Controlled JavaScript replay authority and sandbox policy | Superseded | Historical design; the controlled JavaScript replay tool was removed |
| 0003: Managed-code evidence and provider boundary | Partially superseded | Seven static managed tools remain; runtime planning removed |