Detection
- Support for analyzing ISO images
- Mach-O code signatures are verified, not just read
- Truncated archives raise anti-analysis/malformed/archive-incomplete
- Clearer Mach-O entitlement labels
Correctness
- Rizin skip was process-global: a member opting out muted rizin for whatever binary another thread was parsing.
- Truncated gzip now analyzes the decoded prefix instead of aborting with no report at all.
- PE signer names with escaped commas were truncated: O=Postman, Inc. surfaced as Postman, including in finding ids.
- cleave update no longer wedges on a dangling traits symlink
Performance
- Cold start drops ~5s of per-invocation setup: regex derivations memoized to disk
- Archive scans: string atoms gate regexes, duplicate lazy compiles deduped
- Member strings are freed after matching — multiple GB on member-heavy archives.
Platforms
- Initial Windows & NetBSD builds
- illumos cross-builds