DFTK Skill 3.7.0 — Agent perception and evidence continuity

DFTK Skill 3.7.0

This release aligns the guidance bundle with the DFTK 3.7.0 runtime: 136
capabilities in 29 domains, eight MCP meta-tools, and 31 specialist workflows.

• Keep investigation choices, evidence interpretation and scheduling with the
  host Agent. DFTK supplies bounded perception/actions and source-linked memory.
• Add media perception guidance: scoped consent
  and confirmed image-model support before native image/video-frame disclosure;
  contact sheets and crops for overview/detail; metadata alone is not review.
• Document local GPU-first OCR, batch model reuse and explicit continuation.
  GPU failures do not authorise slow CPU execution; obtain separate affirmative
  consent. Provision trusted weights separately rather than during examination.
• Retain media, encrypted files, derived outputs and declined/deferred review in
  the Case inventory. Continue independent evidence when one branch blocks.
• Replace password/algorithm guessing guidance with one source-backed candidate
  and known parameters. Describe OpenSSL structural validation and its limits;
  preserve the same Case across decryption, extraction and subsequent analysis.
• Use paged directory/text access and JSON Pointer/provenance paging to retrieve
  evidence instead of repeatedly rerunning parsers or treating previews as complete.
• Refresh the capability catalog from all 136 live registry contracts and keep
  the progressive tree plus standalone specialist copies intact.

Install the whole bundle with dftk skill --install using DFTK 3.7.0. The matching
GitHub tag is v3.7.0. Capability availability comes from the installed runtime;
method-only specialist guidance does not imply that DFTK supplies a third-party
decompiler, memory engine, cryptographic verifier or live analysis sandbox.

Release verification

• Documentation CI passed for the tagged bundle.
• Pair with DFTK 3.7.0. GitHub source archives contain the complete tagged bundle.

Current documentation was refreshed after this tag; those later documentation changes are on main and are not part of the v3.7.0 source archive.