Bytecode, VM, polymorphism, and execution internals.
mutant builtin functions comprehensive plan roadmap for hardening and expanding builtin into a solid cross-platform well-documented standard library across four tiers generic security and...
Search Engine
Full-text search across titles, headings, tags, descriptions, and body content.
Shortcut: Ctrl + K
Results
Bytecode, VM, polymorphism, and execution internals.
mutant builtin functions comprehensive plan roadmap for hardening and expanding builtin into a solid cross-platform well-documented standard library across four tiers generic security and...
PROCESS INJECTION DETECTION LLD
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...uture architecture for cross-process detection - data model scoring and rollout plan out of scope - offensive code or exploit implementation - kernel driver implementation - full edr product design --- 3 current implementation summary 3 1 where the logic lives...
Bytecode, VM, polymorphism, and execution internals.
...nt8 ins instructions length int64 password string offset int64 uint8 error both functions call security securexor before decoding length is the total byte length of the main function s instruction stream used as part of the xor key derivation offset is the abs...
Editor integration, implementation workflow, and operational runbooks.
...letion flow mermaid diagram implementation notes - completions include keywords builtins snippets visible scope bindings - ordering is deterministic and stabilized with explicit sort keys in analyzer 4 3 rename flow mermaid diagram 5 diagnostics and linting co...
LSP EXTENSION ONBOARDING 60 MIN
Editor integration, implementation workflow, and operational runbooks.
...editor flicker and flaky tests - how visible scope bindings merge with keywords builtins and snippets exercise b trace hover and signature help 8-10 min goal understand teaching metadata path 1 start at server hover signature handlers in lsp internal server se...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...alidation it maps 1 security requirements and controls 2 implementation anchors functions files 3 runtime configuration surfaces flags env 4 test coverage and ci enforcement 5 residual gaps and next validation actions --- 2 traceability model mermaid diagram e...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...urrent implementation to future hardening status tags 1 implemented 2 partial 3 planned canonical design references for this roadmap 1 security_lld security_lld md 2 security_lld_traceability security_lld_traceability md 3 antitamper_probe_enablement_lld antit...
Editor integration, implementation workflow, and operational runbooks.
...d evidence-rich integration tests for platform-specific scanners suggested file plan 1 security processscan_windows go 2 security processscan_windows_stub go 3 security processscan_manager_test go 4 security processscan_correlator_test go 5 runner runner_test ...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...where needed 2 runner enforces sandbox checks at pre-decode and pre-execution 3 builtin diagnostics can report sandbox type confidence and indicators 6 is process injection detection implemented yes as anti-tamper process-protection probes important gates 1 mu...
Big-picture explanations, quick reference material, and definitive orientation docs.
...he capability reference capability_reference md network-32 for the full network builtin table the toolkit is split into three layers 1 stream sockets tls sessions connect listen accept read write and upgrade connections to tls client or server side 2 x 509 cer...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
...t is the practical reference for mutant language features reserved keywords and builtins source of truth - keywords token token go - builtins registry builtin builtin go - builtin names constants builtin names go - builtin teaching metadata signatures builtin ...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...nt including the exact enablement gates and how runner enforcement differs from builtin diagnostic calls 1 architecture core files 1 security antitamper_probe go engine enablement gate 2 security antitamper_routing go probe dispatch 3 security antitamper_detec...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
...erence for the browser wasm repl - what language features are supported - which builtins are available - exact api contracts - known differences from cli repl - what is intentionally unsupported and why source of truth - cmd replwasm main_wasm go - webrepl rep...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...sion flow mermaid diagram 3 anti-tamper probe gates mermaid diagram 4 runner vs builtin probe scope mermaid diagram 5 vm integrity scheduling mermaid diagram 6 polymorphic engine reality snapshot mermaid diagram note 1 mutation controls and seed are wired thro...
ANTITAMPER PROBE ENABLEMENT LLD
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...2 applies confidence threshold 80 3 triggers policy action on threshold hit 5 2 builtins 1 use broader probe sets for diagnostics 2 return probe signals to scripts users 3 do not directly enforce runner blocking path 6 observability telemetry events 1 anti_tam...
Big-picture explanations, quick reference material, and definitive orientation docs.
graph database the db_ builtins embed a property graph database in the mutant runtime for modeling entities and the relationships between them people and documents in a knowledge graph or processes files...
Big-picture explanations, quick reference material, and definitive orientation docs.
mutant capability reference generated from the builtin metadata builtin metadata go the source of truth to refresh after adding or changing builtins iterate builtin builtins and read each entry s teachingdoc platformsupport and...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...lity and operator convenience - defaults tamper policy to warn - defaults risky builtin groups to allow-all unless an explicit capability list is set 2 standard - default profile when the env var is unset or invalid - keeps secure mode fail-closed and compatib...
Bytecode, VM, polymorphism, and execution internals.
... summary of new capabilities changes and upgrades for this release for the full builtin catalog see the capability reference capability_reference md highlights - the standard library roughly doubled now 399 builtins across 32 capability categories all pure-go ...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
...ed anti-tamper and hardening controls for the signed artifact runtime and risky builtins core controls 1 signed artifact verification - signer pinning is enforced in secure mode when --signer-auth is enabled - trusted signer key source is mutant_trusted_public...
Big-picture explanations, quick reference material, and definitive orientation docs.
...tant hashes arrays scalars walk and transform them with the ordinary collection builtins and serialize the result back out 2 encoding base64 base64url base32 hex url-escaping for moving text and bytes through transports that don t like raw binary 3 compression...
Big-picture explanations, quick reference material, and definitive orientation docs.
... useful for anything you want to keep as data instead of compiled logic scoring functions detection classification rules response policies content that a rules team can edit and ship without touching the mutant program that drives it because embedded scripts m...
Big-picture explanations, quick reference material, and definitive orientation docs.
...ncrypted bytecode and standalone binaries - it has a large standard library 399 builtins across 32 categories strings math hashing time structured data json encoding compression higher-order collection functions filesystem networking sockets tls http graph mod...
Big-picture explanations, quick reference material, and definitive orientation docs.
detailed security explanations current behavior this document explains the main security building blocks in simple language 1 policy-driven security mutant does not hardcode one response for all detec...