35c8f9216f
- Introduced `BinaryReachabilityLifterTests` to validate binary lifting functionality. - Created `PackRunWorkerOptions` for configuring worker paths and execution persistence. - Added `TimelineIngestionOptions` for configuring NATS and Redis ingestion transports. - Implemented `NatsTimelineEventSubscriber` for subscribing to NATS events. - Developed `RedisTimelineEventSubscriber` for reading from Redis Streams. - Added `TimelineEnvelopeParser` to normalize incoming event envelopes. - Created unit tests for `TimelineEnvelopeParser` to ensure correct field mapping. - Implemented `TimelineAuthorizationAuditSink` for logging authorization outcomes.
Scanner Design Dossiers
This directory contains deep technical designs for current and upcoming analyzers and surface components.
Language analyzers
ruby-analyzer.md— lockfile, runtime graph, capability signals for Ruby.deno-runtime-signals.md— runtime trace + policy signal contract for Deno analyzer.deno-runtime-shim.md— loader/trace shim plan for runtime NDJSON capture in Deno analyzer.
Surface & platform contracts
surface-fs.mdsurface-env.mdsurface-validation.mdsurface-secrets.md
OS ecosystem designs
macos-analyzer.md— Homebrew, pkgutil,.appbundle plan.windows-analyzer.md— MSI, WinSxS, Chocolatey, registry collectors.
Demand & dashboards
../../benchmarks/scanner/windows-macos-demand.md— demand tracker.../../benchmarks/scanner/windows-macos-interview-template.md— interview template.../../api/scanner/windows-coverage.md— coverage summary dashboard.../../api/scanner/windows-macos-summary.md— metric snapshot.
Utility & reference
../operations/field-engagement.md— SE workflow guidance.../operations/analyzers.md— operational runbook.../operations/rustfs-migration.md— storage migration notes.
Maintenance tips
- Keep demand tracker (
../../benchmarks/scanner/windows-macos-demand.md) and API dashboards in sync when updating macOS/Windows designs. - Cross-reference policy readiness briefs for associated predicates and waiver models.
Policy readiness
../policy/secret-leak-detection-readiness.md— secret leak pipeline decisions.../policy/windows-package-readiness.md— Windows analyzer policy decisions.