dabao1955 aa9af54854 Absorb gaps from three public reverse-engineering skills ...

Batch 1 (full): Kotlin original-name recovery (new reference + zero-dep
kotlin_name_recovery.py mining @DebugMetadata/@Metadata.d2/jadx rename
comments, with -o/-p/--grep query modes); jadx advanced flags and a
Fernflower/Vineflower second-engine tier in toolchain.md; BuildConfig
sweep habit in recon.md; WebSocket/long-connection state-chain section
in protocol-reverse.md.

jsvmp-only (batches 2-3): A/B/C recovery ladder with black-box reuse
boundary and a wire-parameter family index in jsvmp-recovery.md; new
js-ast-deobfuscation.md pipeline layer (family detection, per-family
pass order, safe-rewrite rules, minimal bootstrap eval, residue metrics)
with js_obf_detect.py weighted detector.

Wiring: routing.md/SKILL.md symptom+index rows, coverage-and-limits,
route-inventory, evidence-summary, capability-matrix (+3 entries,
labels kept honest: scripts observed on fixtures, absorbed methodology
unverified). 12 new unit tests.

Also: silence two environment-dependent mypy errors (yaml/frida
sentinel assignments) and bump mypy python_version 3.9 -> 3.10 with the
trade-off recorded.

Gates: check_repo/check_refs/check_budget/check_commands/check_routing
PASS; pytest 787 passed; flake8 clean; mypy clean.

2026-10-20 11:54:59 +08:00

..

test_blob_decode.py

Reconstruction pass: make the gates tell the truth, make the package self-contained, keep the one-hop symptom index

2026-09-22 01:37:51 +08:00

test_budget_measurement.py

Make the budget gate's hard index-row limit actually fail

2026-10-16 19:17:21 +08:00

test_dex_patch_bytes_regression.py

Reconstruction pass: make the gates tell the truth, make the package self-contained, keep the one-hop symptom index

2026-09-22 01:37:51 +08:00

test_dexutil.py

Reconstruction pass: make the gates tell the truth, make the package self-contained, keep the one-hop symptom index

2026-09-22 01:37:51 +08:00

test_ete_capture.py

Hardware pass: hardware watchpoints, ETE differential tracing, kernel-side event injection

2026-10-15 15:33:28 +08:00

test_hw_watch.py

Hardware pass: hardware watchpoints, ETE differential tracing, kernel-side event injection

2026-10-15 15:33:28 +08:00

test_js_obf_detect.py

Absorb gaps from three public reverse-engineering skills

2026-10-20 11:54:59 +08:00

test_jsvmp_loader_decode.py

Absorb the jsvmp series: JS VMP recovery, and a round-trip-tested loader decoder

2026-10-19 22:33:01 +08:00

test_kernel_instrument_scaffold.py

Hardware pass: hardware watchpoints, ETE differential tracing, kernel-side event injection

2026-10-15 15:33:28 +08:00

test_kotlin_name_recovery.py

Absorb gaps from three public reverse-engineering skills

2026-10-20 11:54:59 +08:00

test_protobuf_decode_raw.py

Reconstruction pass: make the gates tell the truth, make the package self-contained, keep the one-hop symptom index

2026-09-22 01:37:51 +08:00

test_scan_leaks.py

Reconstruction pass: make the gates tell the truth, make the package self-contained, keep the one-hop symptom index

2026-09-22 01:37:51 +08:00

test_trace_addr2sym.py

Hardware pass: hardware watchpoints, ETE differential tracing, kernel-side event injection

2026-10-15 15:33:28 +08:00

test_trace_diff.py

Hardware pass: hardware watchpoints, ETE differential tracing, kernel-side event injection

2026-10-15 15:33:28 +08:00

test_vm_handler_slice.py

Complete the xvmp IR virtualizer end to end and measure the de-virtualization chain on a real fixture

2026-10-16 14:45:03 +08:00