SCOUT v2.4.1

Terminator Re-evaluation Fixes

After v2.4.0, Terminator identified 3 issues. All addressed:

Confidence Calibration

• decompiled_colocated: 0.60 → 0.45 (0.50 for high-risk sinks)
• Separate caps per method: pcode_colocated 0.65, decompiled_colocated 0.50, decompiled_interprocedural 0.60

addr_diff Removal

• Replaced fragile addr_diff > 16 address matching with callee name resolution via resolve_call_target()
• Robust against compiler optimizations and instruction alignment differences

Interprocedural Taint (Strategy 4)

• Cross-function source→sink detection using xref call graph
• Caller with source API calls callee with sink API → decompiled_interprocedural trace
• 1-hop depth limit to control false positives
• Verified: fread→vsprintf across FUN_00012514→FUN_00011fe0 in RT-AX88U

Metric	v2.4.0	v2.4.1
Total taint (RT-AX88U)	15	16
Interprocedural traces	0	1
decompiled_colocated conf	0.60	0.45

🤖 Generated with Claude Code