morluto
4a4d36f881
Distinguish absent CLI directories from unreadable directory counts and truncated slots while preserving known PE headers and readable CLI data. Retain environment-entry coverage in the Darwin parser and classify restricted empty, unavailable and ambiguous environments at the native boundary. Keep cleanup fail-closed; code-signing flags do not establish ownership. Validation: 116 managed source tests, 13 ownership tests, native Swift parser probe and two live Darwin run-token tests; build, static checks and docs checks pass. Restricted-flag cases use parser fixtures; no real restricted capture is claimed. Related to #2035.
340 lines
12 KiB
Swift
340 lines
12 KiB
Swift
import Darwin
|
|
import Foundation
|
|
|
|
struct RunTokenObservation: Encodable {
|
|
let pid: Int32
|
|
let state: String
|
|
let run_id: String?
|
|
let reason: String?
|
|
}
|
|
|
|
struct ProcessIdentityObservation: Encodable {
|
|
let pid: Int32
|
|
let state: String
|