save checkpoint

docs/features/checked/scanner/binary-intelligence-engine.md

@@ -0,0 +1,44 @@
+# Binary Intelligence Engine (Function-Level Code Fingerprinting)
+
+## Module
+Scanner
+
+## Status
+VERIFIED
+
+## Description
+Function-level binary code fingerprinting for entry-trace native terminals, including deterministic symbol-window extraction, vulnerable marker matching, and binary intelligence payload propagation through storage and API contracts.
+
+## Implementation Details
+- **Entry-trace graph contract**:
+  - `src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/EntryTraceTypes.cs`
+    - Added `EntryTraceGraph.BinaryIntelligence`
+    - Added `EntryTraceBinaryIntelligence`, `EntryTraceBinaryTarget`, `EntryTraceBinaryVulnerability`
+- **Serializer/storage round-trip**:
+  - `src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Serialization/EntryTraceGraphSerializer.cs`
+    - Added binary intelligence contract mappings and round-trip conversion.
+- **Worker enrichment**:
+  - `src/Scanner/StellaOps.Scanner.Worker/Processing/EntryTraceExecutionService.cs`
+    - Integrates binary intelligence generation for native terminals during entry-trace execution.
+    - Produces deterministic function windows, binary-format inference, CVE marker extraction, and graph enrichment.
+- **API surface**:
+  - `src/Scanner/StellaOps.Scanner.WebService/Contracts/EntryTraceResponse.cs`
+  - `src/Scanner/StellaOps.Scanner.WebService/Endpoints/ScanEndpoints.cs`
+    - Entry-trace response returns `graph.binaryIntelligence` when available.
+- **Behavioral coverage**:
+  - `src/Scanner/__Tests/StellaOps.Scanner.Worker.Tests/EntryTraceExecutionServiceTests.cs`
+  - `src/Scanner/__Tests/StellaOps.Scanner.WebService.Tests/ScansEndpointsTests.cs`
+  - `src/Scanner/__Tests/StellaOps.Scanner.Storage.Tests/EntryTraceResultStoreTests.cs`
+
+## E2E Test Plan
+- [x] Verify function-level binary fingerprinting behavior in EntryTrace binary test namespace.
+- [x] Verify worker entry-trace execution attaches binary intelligence for native terminal binaries.
+- [x] Verify `GET /api/v1/scans/{scanId}/entrytrace` returns graph payload including `binaryIntelligence`.
+- [x] Verify persisted `EntryTraceResult` round-trips binary intelligence through serializer/repository.
+
+## Verification
+- Run ID: `run-002`
+- Date (UTC): 2026-02-12
+- Tier 0: Source verification passed (`tier0-source-check.json`).
+- Tier 1: Build and focused test executions passed (`tier1-build-check.json`, `tier1-build-results.json`, `tier1-test-results.json`).
+- Tier 2: Integration checks passed for worker, endpoint, and storage round-trip (`tier2-e2e-check.json`).