v1.3

• Replaced the v1.2 scanner core with a value-aware and content-aware engine.
• Added SHA-256 candidate comparison and informational classification for identical duplicates.
• Added live effective-owner matching for mounted files, properties and sysfs values, with method and confidence fields.
• Added canonical path normalization across system, vendor, product, system_ext, odm and *_dlkm overlays.
• Added .replace collision and tree-masking analysis.
• Added module-local overlay.d scanning and global /data/adb/overlay.d inventory.
• Added system.prop value comparison and current-value matching.
• Added runtime-script analysis for properties, settings, device_config, sysctl, sysfs, mounts, file operations, permissions and live sepolicy actions.
• Added exact known-pair database support, whitelist handling, snapshots and before/after comparison.
• Added device metadata and an expanded JSON report schema.
• Added stale scan-lock recovery and --critical-only reporting.
• Fixed false combined root-manager results caused by stale/shared /data/adb directories.
• Root-manager detection now prioritizes the active su provider signature, then exact daemon names, then manager-owned executable binaries.
• Added family-aware detection for Magisk-compatible, KernelSU-family and APatch managers, including identifiable forks.
• Added root detection method, confidence, family and evidence to doctor and JSON reports.
• Fixed automatic scans on APatch/FolkPatch where a background child could be terminated after service.sh exited.
• Added native boot-completed.sh support for APatch and KernelSU-family managers.
• Added a shared one-shot boot launcher with per-boot deduplication, process locking and stale-lock recovery.
• Added /data/adb/mcd/boot-scan.status, /data/adb/mcd/boot-scan.log and mcd-ctrl boot-status.
• Added a bounded wait for sys.boot_completed in the Magisk-compatible service fallback.