morluto 4a4d36f881 fix(evidence): retain unreadable PE and Darwin process facts ...

Distinguish absent CLI directories from unreadable directory counts and truncated slots while preserving known PE headers and readable CLI data.

Retain environment-entry coverage in the Darwin parser and classify restricted empty, unavailable and ambiguous environments at the native boundary. Keep cleanup fail-closed; code-signing flags do not establish ownership.

Validation: 116 managed source tests, 13 ownership tests, native Swift parser probe and two live Darwin run-token tests; build, static checks and docs checks pass. Restricted-flag cases use parser fixtures; no real restricted capture is claimed. Related to #2035.

2026-10-12 11:59:23 +08:00

..

ProcessRunTokenReader.swift

fix(evidence): retain unreadable PE and Darwin process facts

2026-10-12 11:59:23 +08:00

ProcessRunTokenReaderMain.swift

fix(process): preserve partial evidence and verify detached cleanup (#1011)

2026-10-08 04:46:46 +08:00