prep docs and service updates

src/Scanner/AGENTS.md

@@ -10,7 +10,10 @@
 - `docs/07_HIGH_LEVEL_ARCHITECTURE.md`
 - `docs/modules/platform/architecture-overview.md`
 - `docs/modules/scanner/architecture.md`
-- Current sprint file (e.g., `docs/implplan/SPRINT_0131_0001_0001_scanner_surface.md`).
+- `docs/reachability/DELIVERY_GUIDE.md` (sections 5.5–5.9 for native/JS/PHP updates)
+- `docs/reachability/purl-resolved-edges.md`
+- `docs/reachability/patch-oracles.md`
+- Current sprint file (e.g., `docs/implplan/SPRINT_401_reachability_evidence_chain.md`).
 
 ## Working Directory & Boundaries
 - Primary scope: `src/Scanner/**` (analyzers, worker, web service, plugins, __Libraries, __Tests, __Benchmarks, docs).
@@ -23,6 +26,8 @@
 - Determinism: stable ordering, UTC ISO-8601 timestamps, no `DateTime.Now`/random without seed; normalize path separators.
 - Logging: structured (`ILogger` message templates); avoid secrets/paths leakage.
 - Security: no executing untrusted payloads; keep analyzers pure; include redaction guidance for runtime capture adapters.
+- Native analyzers: capture `.note.gnu.build-id` when present and thread into `SymbolID`/`code_id`; add synthetic roots for `.preinit_array/.init_array/_init`; emit purl+symbol-digest on call edges; emit Unknowns when symbol→purl or edges are unresolved.
+- Tests: keep patch-oracle fixtures deterministic (strip binaries; stable compilers); add/maintain `tests/reachability/patch-oracles/**` when touching native analyzers.
 
 ## Testing & Verification
 - Default: `dotnet test src/Scanner/StellaOps.Scanner.sln`.