stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
c52ca826528b63f38386a0adddecff0eaacfcf30
git.stella-ops.org/docs/features/checked/scanner/binary-intelligence-engine.md
master 9911b7d73c save checkpoint
2026-02-12 21:02:43 +02:00

2.5 KiB
Raw Blame History

Binary Intelligence Engine (Function-Level Code Fingerprinting)

Module

Scanner

Status

VERIFIED

Description

Function-level binary code fingerprinting for entry-trace native terminals, including deterministic symbol-window extraction, vulnerable marker matching, and binary intelligence payload propagation through storage and API contracts.

Implementation Details

  • Entry-trace graph contract:
    • src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/EntryTraceTypes.cs
      • Added EntryTraceGraph.BinaryIntelligence
      • Added EntryTraceBinaryIntelligence, EntryTraceBinaryTarget, EntryTraceBinaryVulnerability
  • Serializer/storage round-trip:
    • src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Serialization/EntryTraceGraphSerializer.cs
      • Added binary intelligence contract mappings and round-trip conversion.
  • Worker enrichment:
    • src/Scanner/StellaOps.Scanner.Worker/Processing/EntryTraceExecutionService.cs
      • Integrates binary intelligence generation for native terminals during entry-trace execution.
      • Produces deterministic function windows, binary-format inference, CVE marker extraction, and graph enrichment.
  • API surface:
    • src/Scanner/StellaOps.Scanner.WebService/Contracts/EntryTraceResponse.cs
    • src/Scanner/StellaOps.Scanner.WebService/Endpoints/ScanEndpoints.cs
      • Entry-trace response returns graph.binaryIntelligence when available.
  • Behavioral coverage:
    • src/Scanner/__Tests/StellaOps.Scanner.Worker.Tests/EntryTraceExecutionServiceTests.cs
    • src/Scanner/__Tests/StellaOps.Scanner.WebService.Tests/ScansEndpointsTests.cs
    • src/Scanner/__Tests/StellaOps.Scanner.Storage.Tests/EntryTraceResultStoreTests.cs

E2E Test Plan

  • Verify function-level binary fingerprinting behavior in EntryTrace binary test namespace.
  • Verify worker entry-trace execution attaches binary intelligence for native terminal binaries.
  • Verify GET /api/v1/scans/{scanId}/entrytrace returns graph payload including binaryIntelligence.
  • Verify persisted EntryTraceResult round-trips binary intelligence through serializer/repository.

Verification

  • Run ID: run-002
  • Date (UTC): 2026-02-12
  • Tier 0: Source verification passed (tier0-source-check.json).
  • Tier 1: Build and focused test executions passed (tier1-build-check.json, tier1-build-results.json, tier1-test-results.json).
  • Tier 2: Integration checks passed for worker, endpoint, and storage round-trip (tier2-e2e-check.json).