Search Engine
Full-text search across titles, headings, tags, descriptions, and body content.
Shortcut: Ctrl + K
Results
PROCESS INJECTION DETECTION LLD
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
process injection detection lld 1 purpose this low level design lld explains how mutant currently detects process injection-related tampering and how to expand this into a richer m...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
... returns cache counters such as hits misses puts deletes and expires system and process - cmd_add builder arg - appends an argument to a command builder - cmd_builder shell - creates a command builder object for step-wise command composition - cmd_run builder ...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
remote process scan deep dive 1 scope this document describes the current remote process scan architecture and integration points it covers 1 config and mode gates 2 verdict correlation m...
Editor integration, implementation workflow, and operational runbooks.
... anti-debug and sandbox staged checks 4 anti-tamper probe framework and windows process-protection probes 5 vm integrity probes and telemetry export 2 phase a documentation and observability hardening 1 keep all security docs aligned to lld source-of-truth doc...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...tion for future security changes - test strategy and ci policy enforcement this lld focuses on anti-tamper and anti-piracy controls under an offline-first threat model companion deep dives 1 binary_artifact_security_deep_dive binary_artifact_security_deep_dive...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
... - p partial pending depth --- 3 security control matrix id control requirement lld area implementation anchors config surface tests ci evidence status ------- ---------------------------------------------------------------------------------- -----------------...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...vel design treat the following as authoritative and update this file 1 security_lld security_lld md 2 security_lld_traceability security_lld_traceability md 3 antitamper_probe_enablement_lld antitamper_probe_enablement_lld md 4 binary_artifact_security_deep_di...
ANTITAMPER PROBE ENABLEMENT LLD
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
anti-tamper probe enablement lld 1 purpose this lld defines how anti-tamper probe execution is enabled how runner enforcement is gated and how diagnostics differ from enforcement 2 problem statement users ofte...
Big-picture explanations, quick reference material, and definitive orientation docs.
...etwork registry memory binary parsing command execution json lua graph modeling detection policy and cache workflows - it includes runtime protections such as signature verification anti-tamper checks anti-debug checks anti-sandbox checks process protection an...
Big-picture explanations, quick reference material, and definitive orientation docs.
...language 1 policy-driven security mutant does not hardcode one response for all detections 1 a detector raises an event or signal 2 policy decides action using mode profile env configuration 3 action can be warn delay or terminate why this is useful 1 producti...
Big-picture explanations, quick reference material, and definitive orientation docs.
...implementation behavior 1 is anti-debugging implemented yes 1 platform-specific detection exists in security package 2 runner enforces checks at pre-decode and pre-execution stages 3 response is policy-driven warn delay terminate 2 is process injection detecti...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
... json regex text policy cache in-memory db host-bound builtins not supported fs process exec network registry memory binary disk-image families completion modes supported supported callable-now and all discoverability output model supported buffered putf putln...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...hen multiple are passed 4 is anti-debugging implemented yes 1 platform-specific detection exists in security antidebug_ go 2 runner enforces anti-debug checks at - pre-decode - pre-execution 3 action is policy-driven warn delay terminate 5 is sandbox detection...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...detectors go cross-platform heuristics 4 security antitamper_windows go windows process-protection heuristics 5 runner runner go enforcement 6 builtin security_status go diagnostic exposure telemetry events used by this subsystem 1 anti_tamper_probe_invoked 2 ...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...ted 2 partial 3 planned canonical design references for this roadmap 1 security_lld security_lld md 2 security_lld_traceability security_lld_traceability md 3 antitamper_probe_enablement_lld antitamper_probe_enablement_lld md if roadmap wording and lld differ ...
Bytecode, VM, polymorphism, and execution internals.
polymorphic bytecode lld current roadmap 1 purpose this lld explains the real status of mutant polymorphic bytecode support and the safe path to expand it 2 current implementation core files 1 compiler...
Editor integration, implementation workflow, and operational runbooks.
mutant lsp vs code extension low-level design lld this is the implementation-level developer guide for the mutant language tooling stack audience - junior or new engineers who need to understand how mutant language tooling wor...
Big-picture explanations, quick reference material, and definitive orientation docs.
...d pre-execution 5 anti-tamper probe framework with confidence signals 6 windows process-protection probes and runner threshold enforcement 7 vm runtime integrity probing and telemetry export 8 remote process scan manager with runner observe enforce integration...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...1 anti-debug checks integrated at pre-decode and pre-execution stages 2 sandbox detection integrated at pre-decode and pre-execution stages 3 anti-tamper probe framework integrated and callable from runner and builtins 2 3 process protection 1 runner process-p...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
visual comparison current security model 1 detection vs enforcement mermaid diagram old confusion 1 signal and action were treated as the same concept current model 1 signal generation is separate from policy action 2 probe...
Bytecode, VM, polymorphism, and execution internals.
...tamper gates and polymorphic activation depth use 1 antitamper_probe_enablement_lld antitamper_probe_enablement_lld md 2 process_injection_detection_lld process_injection_detection_lld md 3 polymorphic_bytecode_lld polymorphic_bytecode_lld md --- table of cont...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
sandbox detection feature - complete implementation executive summary successfully implemented comprehensive sandbox and virtual machine detection for the mutant security framework this ne...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
sandbox detection feature overview the sandbox detection module identifies containerized and virtualized runtimes and feeds that signal into the runtime tamper-response pipeline current im...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
sandbox detection feature - implementation summary overview added comprehensive sandbox and virtual machine detection to the mutant security module this feature complements existing anti-d...
BINARY ARTIFACT SECURITY DEEP DIVE
Bytecode, VM, polymorphism, and execution internals.
...uth false - skips signature verification path - continues to anti-debug sandbox process protection and decode path 3 securemode false - runs compatibility signature verification path - signature failures are policy-driven warn delay terminate 5 standalone trai...
LSP EXTENSION ONBOARDING 60 MIN
Editor integration, implementation workflow, and operational runbooks.
...ely modify mutant language tooling use this guide together with - lsp extension lld lsp_extension_lld md - vs code lsp teaching reference vscode_lsp_teaching_reference md - vs code extension troubleshooting vscode_extension_troubleshooting md 1 outcomes by the...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
... integrity checks run periodically with seeded jitter and sweep probes - tamper detection triggers policy-driven response and telemetry 4 anti-debugging - pre-decode and pre-execution debugger checks run in the launcher path - platform-specific heuristics are ...
