v7.0.0

REA v7.0.0 — Understand & Trust: read the binary like an analyst and attribute where it came from. Pure Rust, offline, every claim tied to the addressable evidence bundle.

Decompiler quality

• Conditions render from the controlling cmp/test operands: if (rbx < r8).
• Pre-tested loops hoist into real while (cond) instead of while (true).
• cbz/cbnz render as explicit zero tests: if (r3 != 0).
• Widening loads cast to their true integer type: eax = (uint16_t)*(r14).

Behavioral & cross-format

• New deterministic Call Graph report section (functions, edges, entry, most-called, leaves, recursion).
• Behavior summaries for WebAssembly, EVM bytecode, Java classes, managed .NET assemblies, and Go binaries.
• Emulation now also recovers runtime strings written to memory, alongside flag-shaped tokens.

Trust — dependency recovery & provenance

• SBOM (rea sbom, MCP get_sbom) enumerates linked libraries, managed AssemblyRef dependencies with public-key tokens, Rust cargo-auditable crates, and Go modules.
• Provenance section and CycloneDX/SPDX properties: toolchain, dependencies, and build environment (PDB and DWARF build paths).
• Every behavioral claim and dependency is an addressable item in re-<name>.evidence.json; verify offline with rea verify.

Quality

• cargo xtask check green; CI green; all new modules documented and tested. No network, no external tools required.