Origin Trace v0.1.8

macOS download

• Origin Trace v0.1.8 adds bounded static JavaScript deobfuscation inside Sources. The application is built by GitHub Actions from this release tag and contains no bundled evidence.
• Brave Browser Development preview is unchanged. If you already have it, download only Origin Trace.

Deobfuscation

• Switch between original and derived JavaScript directly in Sources while retaining the captured artifact.
• Map every derived rewrite to its original UTF-8 byte range.
• Fold bounded primitive expressions, constants, literal string tables, proxy calls, closed custom decoders, and loop/switch dispatchers.
• Opt in to a visible standard-intrinsics model for character decoders and JSFuck-style coercion.
• Reject excessive parser nesting before recursive analysis and retain unresolved code when safety or correctness cannot be proven.

Limits and safety

Captured JavaScript is never executed. Unknown effects, arbitrary top-level control-flow graphs, recursion, custom prototype hooks, mutable or escaping tables, and unsupported operations remain visible. The worker enforces source, parser, evaluation, loop, rewrite, and output limits.

The application is ad-hoc signed for development and internal use. It is not Developer ID signed or notarized.

Changes

• Sources deobfuscation and bounded native Rust analysis
• Parser nesting guard
• Bounded proxy calls
• Bounded custom decoders
• Explicit JSFuck coercion analysis
• Bounded decoder control-flow recovery
• Version 0.1.8 packaging

Full changelog