root 45ba13c0f3 Absorb three write-ups on dump timing, native VM devirtualization and encrypted bodies ...

vm1: dump window at android_dlopen_ext entry, raw-syscall reader, zero-filled holes; predicate-first patching with tiered ordering; module-filtered signal attribution.

vm2: devirtualization to a straight-line (op, args) program with constant table, output map and template; version binding; per-node validation.

vm3: three black-box cipher probes, involution wrappers, encoding/compression drift; a certificate-derived salt inside the signature digest.

Also adds pitfalls P49-P50, three capability rows (all partial/unverified), the evidence/route records and EXTENSION-ref-absorption-2026-10b.md. Renumbers native-vm-recovery section 11 to 12. Gates and pytest green.

2026-10-25 12:10:41 +08:00

..

tool-verification

Absorb three write-ups on dump timing, native VM devirtualization and encrypted bodies

2026-10-25 12:10:41 +08:00