Kaoru0822andClaude Opus 5.5 b6007e0a58 fix(process): keep capture evidence when an admitted root's ancestor changes (#6264) ...

Final filesystem observation reconstructed root admission from the initial
snapshot's root entries, so an initially absent root (no entry) whose ancestor
became a regular file failed capture with ENOTDIR after the child completed.

A returned initial snapshot now admits every selected root for the run. One
tagged path lookup classifies ENOENT and ENOTDIR as observed absence and other
unavailable lookups (EACCES, ELOOP, ...) as entry_unavailable omissions that
keep the root incomplete. Selected roots that are obstructed or denied before
launch still fail capture.

Fixes #6213

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-22 00:28:26 -07:00

..

.vitepress

feat(elf): inspect PT_NOTE and SHT_NOTE tables (#4837)

2026-10-22 15:02:23 +08:00

assets

…

readme

feat(elf): inspect PT_NOTE and SHT_NOTE tables (#4837)

2026-10-22 15:02:23 +08:00

releases

…

specs

feat(environment): apply evidence-gated write effects to the served state (#5600)

2026-10-22 14:15:35 +08:00

verification

feat(gpu): inspect static CUDA and HIP code objects (#5813)

2026-10-21 19:06:44 +08:00

adb-device-analysis.md

fix(android): name the JADX deadline and recover apktool decode (#6024)

2026-10-22 00:31:43 +08:00

agent-environments.md

feat(environment): apply evidence-gated write effects to the served state (#5600)

2026-10-22 14:15:35 +08:00

android-analysis.md

fix(android): name the JADX deadline and recover apktool decode (#6024)

2026-10-22 00:31:43 +08:00

apktool-resource-analysis.md

fix(android): name the JADX deadline and recover apktool decode (#6024)

2026-10-22 00:31:43 +08:00

apple-application-analysis.md

fix(apple): explain present rejected dylib candidates

2026-10-21 12:34:05 +08:00

architecture.mermaid

…

binary-diagnostics.md

feat(diagnostics): report a byte entropy profile for one local file (#2331)

2026-10-22 14:19:12 +08:00

browser-observation.md

fix(browser): name web-bundle budgets and recover web deadlines (#6036)

2026-10-22 05:47:38 +08:00

browser-scenario-contract.md

fix(browser): name web-bundle budgets and recover web deadlines (#6036)

2026-10-22 05:47:38 +08:00

cli.md

feat(elf): inspect PT_NOTE and SHT_NOTE tables (#4837)

2026-10-22 15:02:23 +08:00

client-configuration.md

fix(providers): name JEB, IDA, and one-shot command deadlines (#6014)

2026-10-22 04:01:02 +08:00

client-verification.md

perf(mcp)!: default to compact input schema advertisements (#5975)

2026-10-22 00:17:11 +08:00

desktop-applications.md

…

electron-fuses.md

…

electron-observation.md

feat(artifacts): make ASAR header admission configurable (#6209)

2026-10-21 21:18:22 -07:00

elf-notes.md

feat(elf): inspect PT_NOTE and SHT_NOTE tables (#4837)

2026-10-22 15:02:23 +08:00

error-contract.schema.json

…

evm-bytecode.md

fix(engines): keep format ceilings fixed and recover the EVMole deadline (#6088)

2026-10-22 03:06:59 +08:00

firmware-analysis.md

fix(firmware): keep a missing producer report distinct after exit 0 (#6008)

2026-10-21 07:52:40 -07:00

flutter-analysis.md

…

frida-instrumentation.md

fix(providers): name JEB, IDA, and one-shot command deadlines (#6014)

2026-10-22 04:01:02 +08:00

ghidra-dos.md

…

ghidra-mips.md

…

ghidra-nativeaot.md

…

ghidra-ppc.md

…

ghidra-provider.md

…

ghidra-psp.md

…

ghidra-riscv.md

…

go-binaries.md

feat(native): inspect a universal Mach-O slice in Go and Rust metadata readers (#6219)

2026-10-21 21:18:35 -07:00

godot-pck.md

…

gpu-code-objects.md

feat(gpu): inspect static CUDA and HIP code objects (#5813)

2026-10-21 19:06:44 +08:00

harmony-analysis.md

…

http3-capture-lab.md

…

ida-provider.md

fix(providers): name JEB, IDA, and one-shot command deadlines (#6014)

2026-10-22 04:01:02 +08:00

il2cpp-metadata.md

…

index.md

feat(elf): inspect PT_NOTE and SHT_NOTE tables (#4837)

2026-10-22 15:02:23 +08:00

installation.md

docs(setup): clarify prebuild-install warning from optional dependencies (#4881) (#5012)

2026-10-22 03:18:41 +08:00

javascript-application-graph.md

feat(managed): project call and field-access edges into the application graph (#6260)

2026-10-22 00:26:56 -07:00

javascript-application-workflows.md

…

javascript-artifact-reconstruction.md

feat(artifacts): make ASAR header admission configurable (#6209)

2026-10-21 21:18:22 -07:00

javascript-recovery.md

fix(javascript): name heap and semantic ceilings (#6022)

2026-10-22 02:44:14 +08:00

javascript-runtime-observation.md

…

javascript-runtime-reconciliation.md

fix(javascript): keep encoded URL slashes inside one runtime path segment (#6259)

2026-10-22 00:26:12 -07:00

jeb-analysis.md

fix(providers): name JEB, IDA, and one-shot command deadlines (#6014)

2026-10-22 04:01:02 +08:00

kuna-provider.md

fix(process): report the effective regex heap and uncertain signal retry (#6099)

2026-10-22 07:40:14 +08:00

managed-code-analysis.md

feat(managed): project call and field-access edges into the application graph (#6260)

2026-10-22 00:26:56 -07:00

mcp-contracts.md

feat(environment): render more read tools from the state and describe responses (#5352)

2026-10-22 07:08:44 +08:00

mcp-prompts.md

…

migration-6.2.md

…

model-artifacts.md

fix(model): preserve unsupported GGUF version diagnostics (#5789)

2026-10-21 05:59:18 +00:00

native-function-matching.md

…

native-investigation.md

feat(native): decode Swift nominal type declarations from __swift5_types (#6257)

2026-10-22 00:19:15 -07:00

packet-captures.md

…

pcap-analysis.md

fix(pcap): preserve frames with empty protocol stacks (#5762)

2026-10-21 04:00:16 +00:00

process-capture.md

fix(process): keep capture evidence when an admitted root's ancestor changes (#6264)

2026-10-22 00:28:26 -07:00

python-packaged-applications.md

feat(artifacts): inspect and extract PyInstaller archives

2026-10-21 12:48:29 +08:00

raw-binary.md

…

reconstruction-coverage.md

…

reconstruction-obligation-ledgers.md

fix(reconstruction)!: summarize obligation ledgers by cited Evidence authority (#5875)

2026-10-21 05:12:55 -07:00

reconstruction-readiness.md

…

recorded-crashes.md

…

releasing.md

…

reverse-engineering-tools.md

fix(providers): name JEB, IDA, and one-shot command deadlines (#6014)

2026-10-22 04:01:02 +08:00

roadmap.md

…

rust-binaries.md

feat(native): inspect a universal Mach-O slice in Go and Rust metadata readers (#6219)

2026-10-21 21:18:35 -07:00

signal-recordings.md

fix(signals): report unknown decoder help IDs as invalid input (#5858)

2026-10-21 04:57:28 -07:00

sqlite-databases.md

fix(sqlite): attribute generated-column evaluation failures to the selection (#5879)

2026-10-21 04:08:49 -07:00

testing.md

fix(apple): decode NIBArchive booleans with AppKit's polarity (#6255)

2026-10-21 23:32:21 -07:00

tool-design.md

…

user-visible-errors.csv

feat(diagnostics): report a byte entropy profile for one local file (#2331)

2026-10-22 14:19:12 +08:00

wasm-artifacts.md

feat(wasm): make command deadlines adjustable with recovery guidance (#5798)

2026-10-21 15:00:05 +08:00

web-network-captures.md

feat(environment): apply evidence-gated write effects to the served state (#5600)

2026-10-22 14:15:35 +08:00

web-runtime.md

fix(browser): name web-bundle budgets and recover web deadlines (#6036)

2026-10-22 05:47:38 +08:00

web-source-location.md

fix(browser): name web-bundle budgets and recover web deadlines (#6036)

2026-10-22 05:47:38 +08:00

website-module-trace.md

…

website-script-export.md

…

windows-ghidra-p0.md

…