{ "schemaVersion": "fenrua.toolchain-registry.v1", "generatedAt": "2026-07-13T07:56:58Z", "repository": "fenrua-web", "verificationMethod": "Read-only local version capture using bounded version and help commands. Outputs are normalized to remove private paths and local host detail.", "truthBoundary": "Tool presence, installation, or version capture is not treated as proof of security. Evidence-producing status is only used where the repository exposes a repeatable evidence path.", "statusVocabulary": [ "INSTALLED_AND_EXECUTED", "INSTALLED_EXECUTED_EVIDENCE_PRODUCING", "INSTALLED_EXPLORATORY", "PROJECT_LOCAL", "CONTAINER_ONLY", "SUPERSEDED", "VERSION_REVIEW_REQUIRED", "NOT_IN_CANONICAL_PIPELINE", "DEPRECATED", "UNAVAILABLE" ], "evidenceLockIntegrityPolicy": { "rule": "The public registry records the toolchain state that matches the evidence environment. Do not update or relabel tool versions after evidence capture unless a new evidence bundle is generated and frozen.", "projectDependencyReview": { "fenruaWebDependencyDrift": "Pinned Playwright and Vercel development dependencies are recorded in package-lock.json; the deployed static site has no runtime package dependency.", "fenruaKernelDirectDependencyDrift": "No direct pnpm dependency drift observed for the inspected kernel package." }, "postEvidenceMutation": { "toolchainUpdatesPerformed": false, "publicSummary": "No recorded toolchain or kernel dependency update was made after the evidence capture represented by this frozen registry. New website validation gates must not be read as a revision of captured tool versions." } }, "semgrepExpectation": { "detectedVersion": "1.169.0", "versionCommand": "semgrep --version", "correctedInstruction": "User clarified on 2026-07-12 that the prior expected marker ending in 18 was a typo; the local detected Semgrep version is retained as the source of truth.", "status": "INSTALLED_AND_EXECUTED" }, "pipelines": [ { "id": "solidity-security", "label": "Solidity and EVM security", "flow": "Contract source -> compiler -> unit and integration testing -> static analysis -> fuzzing -> invariant testing -> symbolic execution -> bytecode/runtime inspection -> evidence bundle" }, { "id": "zk-cryptography", "label": "Zero-knowledge and cryptography", "flow": "Circuit source -> compiler -> static circuit inspection -> witness generation -> setup/proving material -> proof generation -> proof verification -> Solidity verifier generation -> EVM integration -> evidence bundle" }, { "id": "application-security", "label": "Application and web security", "flow": "Application source -> runtime validation -> static link checks -> public discovery checks -> browser-ready static artifact -> evidence bundle" }, { "id": "native-kernel", "label": "Languages and native compilation", "flow": "Kernel source -> compiler/toolchain -> native tests -> sanitizer or differential campaign -> regression records -> evidence bundle" }, { "id": "infrastructure", "label": "Infrastructure and orchestration", "flow": "Runtime environment -> container/image inventory -> database and chain clients -> read-only telemetry -> safe public status" } ], "tools": [ { "tool": "solc", "detectedVersion": "solc, the solidity compiler commandline interface; Version: 0.8.35+commit.47b9dedd.Linux.g++", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Compilation", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["solc --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only. No current frozen contract compile evidence is published from this website." }, { "tool": "solc-select", "detectedVersion": "Installed versions 0.8.24, 0.8.28, 0.8.30, 0.8.35; current 0.8.35", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Compilation", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["solc-select versions"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "The tool does not expose a simple --version output in this environment." }, { "tool": "forge", "detectedVersion": "forge Version: 1.7.1; Commit SHA: 4072e48705af9d93e3c0f6e29e93b5e9a40caed8", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Unit and integration testing", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["forge --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only; no public contract or financial-offering evidence is published." }, { "tool": "cast", "detectedVersion": "cast Version: 1.7.1; Commit SHA: 4072e48705af9d93e3c0f6e29e93b5e9a40caed8", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Deployment inspection", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["cast --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No live contract-state claim is published from this version capture." }, { "tool": "anvil", "detectedVersion": "anvil Version: 1.7.1; Commit SHA: 4072e48705af9d93e3c0f6e29e93b5e9a40caed8", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Local EVM runtime", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["anvil --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No local chain test was run for this website task." }, { "tool": "chisel", "detectedVersion": "chisel Version: 1.7.1; Commit SHA: 4072e48705af9d93e3c0f6e29e93b5e9a40caed8", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Exploratory EVM REPL", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["chisel --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "Exploratory tool; not part of the canonical website validation pipeline." }, { "tool": "Hardhat", "detectedVersion": "Unavailable in PATH", "installationMode": "unavailable", "category": "Solidity, EVM, and contract security", "function": "Unit and integration testing", "installed": false, "executed": false, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["hardhat --version"], "pipeline": ["solidity-security"], "status": "UNAVAILABLE", "evidencePath": "data/toolchain-registry.json", "limitations": "No local Hardhat binary was detected." }, { "tool": "Ethers", "detectedVersion": "Unavailable in fenrua-web package inventory", "installationMode": "unavailable", "category": "Solidity, EVM, and contract security", "function": "EVM integration library", "installed": false, "executed": false, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["npm list --depth=0 --json"], "pipeline": ["solidity-security"], "status": "UNAVAILABLE", "evidencePath": "package.json", "limitations": "Not a dependency of the static website." }, { "tool": "OpenZeppelin Contracts", "detectedVersion": "Unavailable in fenrua-web package inventory", "installationMode": "unavailable", "category": "Solidity, EVM, and contract security", "function": "Contract library", "installed": false, "executed": false, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["npm list --depth=0 --json"], "pipeline": ["solidity-security"], "status": "UNAVAILABLE", "evidencePath": "package.json", "limitations": "Not a dependency of the static website." }, { "tool": "Slither", "detectedVersion": "0.11.5", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Static analysis", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["slither --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No current frozen contract Slither report is published." }, { "tool": "Crytic Compile", "detectedVersion": "0.4.1", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Compilation adapter", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["crytic-compile --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Echidna", "detectedVersion": "Echidna 2.3.2", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Fuzzing and invariant testing", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["echidna --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No current frozen Echidna campaign is published." }, { "tool": "Medusa", "detectedVersion": "medusa version 1.5.1", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Fuzzing and invariant testing", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["medusa --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Aderyn", "detectedVersion": "aderyn 0.6.8", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Static analysis", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["aderyn --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Halmos", "detectedVersion": "halmos 0.3.3", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Symbolic execution", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["halmos --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Solhint", "detectedVersion": "6.2.3", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Linting", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["solhint --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Mythril", "detectedVersion": "Mythril version v0.24.8", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Symbolic execution", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["myth version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Runtime warnings were suppressed from public evidence because they contained local package paths." }, { "tool": "Trail of Bits Ethereum Security Toolbox", "detectedVersion": "trailofbits/eth-security-toolbox:latest image id 365282b8d03a", "installationMode": "container", "category": "Solidity, EVM, and contract security", "function": "Containerized security toolbox", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["docker image ls --format ..."], "pipeline": ["solidity-security", "infrastructure", "version-inventory"], "status": "CONTAINER_ONLY", "evidencePath": "data/toolchain-registry.json", "limitations": "Image presence was verified; the container was not executed for this website task." }, { "tool": "Wake", "detectedVersion": "4.22.1", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Testing and static analysis", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["wake --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "HEVM", "detectedVersion": "0.58.0 [no git revision present]", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Symbolic execution and EVM testing", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["hevm version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version output reports no git revision." }, { "tool": "Certora", "detectedVersion": "certora-cli 8.17.1", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Formal specification and verification tooling", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["certoraRun --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "No Certora run evidence is published." }, { "tool": "Manticore", "detectedVersion": "Manticore 0.3.7", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Symbolic execution", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["manticore --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "Runtime warnings were suppressed from public evidence because they contained local package paths." }, { "tool": "Surya", "detectedVersion": "0.4.13", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Interface and graph analysis", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["surya --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Vyper", "detectedVersion": "0.4.3+commit.bff19ea2", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Contract compilation", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["vyper --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "No Vyper source is part of the current public website evidence." }, { "tool": "Slither helper suite", "detectedVersion": "Installed helper commands from Slither 0.11.5: upgradeability, ERC, storage, mutation, property, flattening, interface", "installationMode": "native", "category": "Solidity, EVM, and contract security", "function": "Upgradeability, storage, mutation, property, flattening, and interface analysis", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["slither-check-upgradeability --version", "slither-read-storage --version", "slither-mutate --version"], "pipeline": ["solidity-security", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "Helper commands require project inputs and do not expose independent version numbers." }, { "tool": "Circom", "detectedVersion": "circom compiler 2.2.3", "installationMode": "native", "category": "Zero-knowledge systems and cryptography", "function": "Circuit compiler", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["circom --version"], "pipeline": ["zk-cryptography", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Project-local Circom compiler", "detectedVersion": "circom v2.2.3 from local Cargo install listing", "installationMode": "project-local", "category": "Zero-knowledge systems and cryptography", "function": "Circuit compiler", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["cargo install --list"], "pipeline": ["zk-cryptography", "version-inventory"], "status": "PROJECT_LOCAL", "evidencePath": "data/toolchain-registry.json", "limitations": "Cargo inventory confirms install; no circuit compilation was run for this website task." }, { "tool": "Circomspect", "detectedVersion": "circomspect v0.9.0 from local Cargo install listing", "installationMode": "native", "category": "Zero-knowledge systems and cryptography", "function": "Static circuit inspection", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["circomspect --help", "cargo install --list"], "pipeline": ["zk-cryptography", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Help output confirms executable behavior; version comes from cargo install inventory." }, { "tool": "SnarkJS", "detectedVersion": "snarkjs@0.7.6", "installationMode": "native-and-project-local", "category": "Zero-knowledge systems and cryptography", "function": "Witness, proof, verification, and Solidity verifier tooling", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["snarkjs --version", "npm -C ../fenrua-kernel list --depth=0 --json"], "pipeline": ["zk-cryptography", "version-inventory"], "status": "PROJECT_LOCAL", "evidencePath": "../Fenrua Website/fenrua-kernel/package.json", "limitations": "Version captured; no Groth16 setup or proof is claimed here." }, { "tool": "RapidSnark", "detectedVersion": "Executable present; help reports prover usage", "installationMode": "native", "category": "Zero-knowledge systems and cryptography", "function": "Proof generation", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["rapidsnark --version", "rapidsnark"], "pipeline": ["zk-cryptography", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "The binary does not expose a version string in the tested command." }, { "tool": "SageMath", "detectedVersion": "10.9", "installationMode": "native", "category": "Zero-knowledge systems and cryptography", "function": "Mathematical validation", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["sage --version"], "pipeline": ["zk-cryptography", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "circomlib", "detectedVersion": "2.0.5", "installationMode": "project-local", "category": "Zero-knowledge systems and cryptography", "function": "Circuit library", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["npm -C ../fenrua-kernel list --depth=0 --json"], "pipeline": ["zk-cryptography", "version-inventory"], "status": "PROJECT_LOCAL", "evidencePath": "../Fenrua Website/fenrua-kernel/package.json", "limitations": "Kernel project dependency; no circuit claim is finalized here." }, { "tool": "circom_tester", "detectedVersion": "Unavailable in inspected package inventories", "installationMode": "unavailable", "category": "Zero-knowledge systems and cryptography", "function": "Circuit testing", "installed": false, "executed": false, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["rg circom_tester package inventories"], "pipeline": ["zk-cryptography"], "status": "UNAVAILABLE", "evidencePath": "data/toolchain-registry.json", "limitations": "Not detected in the inspected website or kernel package manifests." }, { "tool": "circomlibjs", "detectedVersion": "Unavailable in inspected package inventories", "installationMode": "unavailable", "category": "Zero-knowledge systems and cryptography", "function": "Circuit JavaScript helpers", "installed": false, "executed": false, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["rg circomlibjs package inventories"], "pipeline": ["zk-cryptography"], "status": "UNAVAILABLE", "evidencePath": "data/toolchain-registry.json", "limitations": "Not detected in the inspected website or kernel package manifests." }, { "tool": "ffjavascript", "detectedVersion": "0.3.0 and 0.3.1 present in kernel pnpm lockfile", "installationMode": "project-local", "category": "Zero-knowledge systems and cryptography", "function": "Finite-field JavaScript helpers", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["rg ffjavascript ../fenrua-kernel/pnpm-lock.yaml"], "pipeline": ["zk-cryptography", "version-inventory"], "status": "PROJECT_LOCAL", "evidencePath": "../Fenrua Website/fenrua-kernel/pnpm-lock.yaml", "limitations": "Transitive lockfile dependency; not a direct website dependency." }, { "tool": "Age", "detectedVersion": "v1.3.1", "installationMode": "native", "category": "Zero-knowledge systems and cryptography", "function": "Cryptographic file encryption", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["age --version"], "pipeline": ["zk-cryptography", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Noir", "detectedVersion": "Unavailable in PATH", "installationMode": "unavailable", "category": "Zero-knowledge systems and cryptography", "function": "ZK language", "installed": false, "executed": false, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["noir --version"], "pipeline": ["zk-cryptography"], "status": "UNAVAILABLE", "evidencePath": "data/toolchain-registry.json", "limitations": "No noir binary was detected." }, { "tool": "Nargo", "detectedVersion": "nargo version = 1.0.0-beta.22; noirc version = 1.0.0-beta.22+c57152f91260ecdb9faad4efc20abb14b6d2ece7", "installationMode": "native", "category": "Zero-knowledge systems and cryptography", "function": "Noir package/build tooling", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["nargo --version"], "pipeline": ["zk-cryptography", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "No Noir project is published by this website." }, { "tool": "Barretenberg", "detectedVersion": "5.0.0-nightly.20260522", "installationMode": "native", "category": "Zero-knowledge systems and cryptography", "function": "Proof backend", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["bb --version"], "pipeline": ["zk-cryptography", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "Nightly build; no proof evidence is claimed here." }, { "tool": "OpenSSL", "detectedVersion": "OpenSSL 3.5.5 27 Jan 2026", "installationMode": "native", "category": "Zero-knowledge systems and cryptography", "function": "Cryptographic utility", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["openssl version"], "pipeline": ["zk-cryptography", "supporting-cli", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "GnuPG", "detectedVersion": "gpg (GnuPG) 2.4.8; libgcrypt 1.12.0", "installationMode": "native", "category": "Zero-knowledge systems and cryptography", "function": "Signing and verification utility", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["gpg --version"], "pipeline": ["zk-cryptography", "supporting-cli", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only; no signing key material is exposed." }, { "tool": "Node.js", "detectedVersion": "v24.18.0", "installationMode": "native", "category": "Application and web security", "function": "Validation runtime", "installed": true, "executed": true, "evidenceProduced": true, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["node --version", "npm run validate"], "pipeline": ["application-security", "version-inventory"], "status": "INSTALLED_EXECUTED_EVIDENCE_PRODUCING", "evidencePath": "package.json; scripts/require-node24.mjs", "limitations": "Evidence scope is website validation, not production runtime attestation." }, { "tool": "npm", "detectedVersion": "11.18.0", "installationMode": "native", "category": "Application and web security", "function": "Package manager", "installed": true, "executed": true, "evidenceProduced": true, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["npm --version", "npm run validate"], "pipeline": ["application-security", "version-inventory"], "status": "INSTALLED_EXECUTED_EVIDENCE_PRODUCING", "evidencePath": "package.json", "limitations": "No package install was performed." }, { "tool": "npx", "detectedVersion": "11.18.0", "installationMode": "native", "category": "Application and web security", "function": "Package command runner", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["npx --version"], "pipeline": ["application-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "package.json", "limitations": "Used for deploy script design only; no deploy was run." }, { "tool": "pnpm", "detectedVersion": "Installed but blocked in fenrua-web because packageManager is npm", "installationMode": "native-or-project-policy-blocked", "category": "Application and web security", "function": "Package manager", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["pnpm --version"], "pipeline": ["application-security", "version-inventory"], "status": "NOT_IN_CANONICAL_PIPELINE", "evidencePath": "package.json", "limitations": "This repository is explicitly configured for npm." }, { "tool": "Yarn", "detectedVersion": "Installed but blocked in fenrua-web because packageManager is npm", "installationMode": "native-or-project-policy-blocked", "category": "Application and web security", "function": "Package manager", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["yarn --version"], "pipeline": ["application-security", "version-inventory"], "status": "NOT_IN_CANONICAL_PIPELINE", "evidencePath": "package.json", "limitations": "This repository is explicitly configured for npm." }, { "tool": "Corepack", "detectedVersion": "0.35.0", "installationMode": "native", "category": "Application and web security", "function": "Package manager dispatcher", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["corepack --version"], "pipeline": ["application-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "TypeScript", "detectedVersion": "Unavailable in PATH; Deno reports TypeScript 6.0.3 internally", "installationMode": "unavailable", "category": "Application and web security", "function": "Type validation", "installed": false, "executed": false, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["tsc --version", "deno --version"], "pipeline": ["application-security"], "status": "UNAVAILABLE", "evidencePath": "data/toolchain-registry.json", "limitations": "No standalone tsc binary was detected." }, { "tool": "Next.js", "detectedVersion": "Unavailable in PATH", "installationMode": "unavailable", "category": "Application and web security", "function": "Application framework", "installed": false, "executed": false, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["next --version"], "pipeline": ["application-security"], "status": "UNAVAILABLE", "evidencePath": "package.json", "limitations": "The public site is plain static HTML/CSS/JS, not a Next.js app." }, { "tool": "React", "detectedVersion": "Unavailable in fenrua-web package inventory", "installationMode": "unavailable", "category": "Application and web security", "function": "UI library", "installed": false, "executed": false, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["npm list --depth=0 --json"], "pipeline": ["application-security"], "status": "UNAVAILABLE", "evidencePath": "package.json", "limitations": "Not a dependency of the static website." }, { "tool": "Tailwind CSS", "detectedVersion": "Unavailable in fenrua-web package inventory", "installationMode": "unavailable", "category": "Application and web security", "function": "CSS framework", "installed": false, "executed": false, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["npm list --depth=0 --json"], "pipeline": ["application-security"], "status": "UNAVAILABLE", "evidencePath": "package.json", "limitations": "The site uses a local CSS file." }, { "tool": "ESLint", "detectedVersion": "Unavailable in PATH", "installationMode": "unavailable", "category": "Application and web security", "function": "Linting", "installed": false, "executed": false, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["eslint --version"], "pipeline": ["application-security"], "status": "UNAVAILABLE", "evidencePath": "package.json", "limitations": "No ESLint binary was detected." }, { "tool": "Prettier", "detectedVersion": "3.9.4", "installationMode": "native", "category": "Application and web security", "function": "Formatting", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["prettier --version"], "pipeline": ["application-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only; no formatting run was required." }, { "tool": "Playwright", "detectedVersion": "@playwright/test 1.61.1", "installationMode": "npm devDependency", "category": "Application and web security", "function": "Browser validation", "installed": true, "executed": true, "evidenceProduced": true, "lastVerifiedAt": "2026-07-13T07:56:58Z", "commands": ["npm exec --no -- playwright --version", "npm run test:browser"], "pipeline": ["application-security"], "status": "INSTALLED_EXECUTED_EVIDENCE_PRODUCING", "evidencePath": "tests/browser/non-live-public-surface.spec.mjs", "limitations": "Covers Evidence, Status, Toolchain, and Verify including their mobile header rail; Overview desktop cards, live API responses, and protected systems are excluded." }, { "tool": "Supabase JavaScript SDK", "detectedVersion": "Unavailable in fenrua-web package inventory", "installationMode": "unavailable", "category": "Application and web security", "function": "Database and edge API client", "installed": false, "executed": false, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["npm list --depth=0 --json"], "pipeline": ["application-security"], "status": "UNAVAILABLE", "evidencePath": "package.json", "limitations": "The public website exposes no browser Supabase credentials or client." }, { "tool": "Semgrep", "detectedVersion": "1.169.0", "installationMode": "native", "category": "Application and web security", "function": "Source analysis", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["semgrep --version"], "pipeline": ["application-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version capture only. User corrected the prior expected marker typo; no Semgrep scan result is claimed here." }, { "tool": "Deno", "detectedVersion": "deno 2.9.2; v8 14.9.207.2-rusty; typescript 6.0.3", "installationMode": "native-and-container", "category": "Application and web security", "function": "Validation runtime", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["deno --version", "docker image ls --format ... denoland/deno"], "pipeline": ["application-security", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured; Deno is not part of fenrua-web npm validate." }, { "tool": "Trivy", "detectedVersion": "Native binary unavailable; aquasec/trivy:0.70.0 image id be1190afcb28 detected", "installationMode": "container", "category": "Application and web security", "function": "Container and dependency scanning", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["trivy --version", "docker image ls --format ... aquasec/trivy"], "pipeline": ["application-security", "infrastructure", "version-inventory"], "status": "CONTAINER_ONLY", "evidencePath": "data/toolchain-registry.json", "limitations": "Image presence was verified; no Trivy scan was run for this website task." }, { "tool": "Repository-local validation scripts", "detectedVersion": "fenrua-web npm validate scripts at package version 1.0.0", "installationMode": "project-local", "category": "Application and web security", "function": "Static export, metadata, link, API, and telemetry validation", "installed": true, "executed": true, "evidenceProduced": true, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["npm run validate"], "pipeline": ["application-security"], "status": "INSTALLED_EXECUTED_EVIDENCE_PRODUCING", "evidencePath": "scripts/check-static-links.mjs; scripts/check-public-discovery.mjs; scripts/test-chain-progress.mjs; scripts/test-kernel-telemetry.mjs", "limitations": "Validation is scoped to the static website and serverless chain-progress API." }, { "tool": "Python", "detectedVersion": "Python 3.14.4", "installationMode": "native", "category": "Languages and native compilation", "function": "Language runtime", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["python3 --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "python command was unavailable; python3 was available." }, { "tool": "pip", "detectedVersion": "pip 25.1.1 (python 3.14)", "installationMode": "native", "category": "Languages and native compilation", "function": "Python package manager", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["pip --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Local package path omitted from public evidence." }, { "tool": "uv", "detectedVersion": "uv 0.11.26", "installationMode": "native", "category": "Languages and native compilation", "function": "Python tool/package manager", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["uv --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "pipx", "detectedVersion": "1.8.0", "installationMode": "native", "category": "Languages and native compilation", "function": "Python isolated CLI installer", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["pipx --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "pytest", "detectedVersion": "pytest 9.0.2", "installationMode": "native", "category": "Languages and native compilation", "function": "Test runner", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["pytest --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No pytest suite is part of this static website." }, { "tool": "Rust", "detectedVersion": "rustc 1.97.0 (2d8144b78 2026-07-07)", "installationMode": "native", "category": "Languages and native compilation", "function": "Compiler", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["rustc --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Cargo", "detectedVersion": "cargo 1.97.0 (c980f4866 2026-06-30)", "installationMode": "native", "category": "Languages and native compilation", "function": "Rust package manager", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["cargo --version", "cargo install --list"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "rustup", "detectedVersion": "rustup 1.29.0 (28d1352db 2026-03-05)", "installationMode": "native", "category": "Languages and native compilation", "function": "Rust toolchain manager", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["rustup --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Go", "detectedVersion": "go version go1.26.0 linux/amd64", "installationMode": "native", "category": "Languages and native compilation", "function": "Compiler/runtime", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["go version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "GCC", "detectedVersion": "gcc (Ubuntu 15.2.0-16ubuntu1) 15.2.0", "installationMode": "native", "category": "Languages and native compilation", "function": "C compiler", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["gcc --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "G++", "detectedVersion": "g++ (Ubuntu 15.2.0-16ubuntu1) 15.2.0", "installationMode": "native", "category": "Languages and native compilation", "function": "C++ compiler", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["g++ --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "GFortran", "detectedVersion": "GNU Fortran (Ubuntu 15.2.0-16ubuntu1) 15.2.0", "installationMode": "native", "category": "Languages and native compilation", "function": "Fortran compiler", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["gfortran --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Clang", "detectedVersion": "Ubuntu clang version 21.1.8 (6ubuntu1)", "installationMode": "native", "category": "Languages and native compilation", "function": "C compiler", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["clang --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "InstalledDir path omitted from public evidence." }, { "tool": "Clang++", "detectedVersion": "Ubuntu clang version 21.1.8 (6ubuntu1)", "installationMode": "native", "category": "Languages and native compilation", "function": "C++ compiler", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["clang++ --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "InstalledDir path omitted from public evidence." }, { "tool": "CMake", "detectedVersion": "cmake version 4.2.3", "installationMode": "native", "category": "Languages and native compilation", "function": "Build system", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["cmake --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "GNU Make", "detectedVersion": "GNU Make 4.4.1", "installationMode": "native", "category": "Languages and native compilation", "function": "Build automation", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["make --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Ninja", "detectedVersion": "1.13.2", "installationMode": "native", "category": "Languages and native compilation", "function": "Build automation", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["ninja --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "NASM", "detectedVersion": "NASM version 3.01", "installationMode": "native", "category": "Languages and native compilation", "function": "Assembler", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["nasm -v"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Bison", "detectedVersion": "bison (GNU Bison) 3.8.2", "installationMode": "native", "category": "Languages and native compilation", "function": "Parser generator", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["bison --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Flex", "detectedVersion": "flex 2.6.4", "installationMode": "native", "category": "Languages and native compilation", "function": "Lexer generator", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["flex --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "ccache", "detectedVersion": "ccache version 4.12.3", "installationMode": "native", "category": "Languages and native compilation", "function": "Compiler cache", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["ccache --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "sccache", "detectedVersion": "sccache 0.13.0", "installationMode": "native", "category": "Languages and native compilation", "function": "Compiler cache", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["sccache --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Mold", "detectedVersion": "mold 2.40.4 (compatible with GNU ld)", "installationMode": "native", "category": "Languages and native compilation", "function": "Linker", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["mold --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Perl", "detectedVersion": "Perl v5.40.1", "installationMode": "native", "category": "Languages and native compilation", "function": "Scripting runtime", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["perl --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Java", "detectedVersion": "OpenJDK 25.0.3 LTS", "installationMode": "native", "category": "Languages and native compilation", "function": "Runtime", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["java -version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Runtime path omitted from public evidence." }, { "tool": "Gradle", "detectedVersion": "Gradle 9.6.1", "installationMode": "native", "category": "Languages and native compilation", "function": "Build automation", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["gradle --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Maven", "detectedVersion": "Apache Maven 3.9.16", "installationMode": "native", "category": "Languages and native compilation", "function": "Build automation", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["mvn --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Local Maven and Java paths omitted from public evidence." }, { "tool": ".NET SDK", "detectedVersion": "10.0.301", "installationMode": "native", "category": "Languages and native compilation", "function": "SDK", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["dotnet --version"], "pipeline": ["native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Bun", "detectedVersion": "1.3.14", "installationMode": "native", "category": "Languages and native compilation", "function": "JavaScript runtime", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["bun --version"], "pipeline": ["application-security", "native-kernel", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Not part of fenrua-web validate." }, { "tool": "WSL2 Ubuntu", "detectedVersion": "Ubuntu 26.04 LTS on WSL 2.7.10.0", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Execution environment", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["lsb_release -ds", "wsl.exe --version"], "pipeline": ["infrastructure", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Public output excludes Windows host details." }, { "tool": "Docker Engine and CLI", "detectedVersion": "Docker version 29.6.1, build 8900f1d", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Container runtime", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["docker --version", "docker version --format"], "pipeline": ["infrastructure", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No private Docker context or registry data is exposed." }, { "tool": "Docker Compose", "detectedVersion": "Docker Compose version v5.2.0", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Container orchestration", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["docker compose version"], "pipeline": ["infrastructure", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Docker Buildx", "detectedVersion": "github.com/docker/buildx v0.35.0-desktop.2 b554ce1decd8b509893b1e7c6227eabfb923d094", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Container build utility", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["docker buildx version"], "pipeline": ["infrastructure", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "Supabase CLI", "detectedVersion": "2.106.0", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Supabase local and deployment tooling", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["supabase --version"], "pipeline": ["infrastructure", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No Supabase secrets, admin URLs, or private topology are exposed." }, { "tool": "PostgreSQL client", "detectedVersion": "psql unavailable in PATH", "installationMode": "unavailable", "category": "Infrastructure, databases, and orchestration", "function": "Database client", "installed": false, "executed": false, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["psql --version"], "pipeline": ["infrastructure"], "status": "UNAVAILABLE", "evidencePath": "data/toolchain-registry.json", "limitations": "Supabase Postgres images were present, but psql was not available as a native CLI." }, { "tool": "kubectl", "detectedVersion": "Client Version: v1.36.1; Kustomize Version: v5.8.1", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Kubernetes client", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["kubectl version --client"], "pipeline": ["infrastructure", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No cluster access or context data is exposed." }, { "tool": "Kustomize", "detectedVersion": "Standalone kustomize unavailable; kubectl embeds Kustomize v5.8.1", "installationMode": "embedded", "category": "Infrastructure, databases, and orchestration", "function": "Kubernetes configuration", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["kustomize version", "kubectl version --client"], "pipeline": ["infrastructure", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "Standalone binary was not detected." }, { "tool": "Helm", "detectedVersion": "v4.2.3+g43e8b7f", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Kubernetes package manager", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["helm version --short"], "pipeline": ["infrastructure", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No cluster access or release state is exposed." }, { "tool": "Terraform", "detectedVersion": "Terraform v1.15.8 on linux_amd64", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Infrastructure as code", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["terraform version"], "pipeline": ["infrastructure", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "No Terraform plan or state is exposed." }, { "tool": "OpenTofu", "detectedVersion": "OpenTofu v1.12.3 on linux_amd64", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Infrastructure as code", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["tofu version"], "pipeline": ["infrastructure", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "No OpenTofu plan or state is exposed." }, { "tool": "Ansible", "detectedVersion": "ansible [core 2.21.1]", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Configuration automation", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["ansible --version"], "pipeline": ["infrastructure", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "Local config and module paths omitted from public evidence." }, { "tool": "Deno Docker runtime", "detectedVersion": "denoland/deno:2.9.0 image id 8d24854de78a", "installationMode": "container", "category": "Infrastructure, databases, and orchestration", "function": "Containerized JavaScript/TypeScript runtime", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["docker image ls --format ... denoland/deno"], "pipeline": ["infrastructure", "application-security", "version-inventory"], "status": "CONTAINER_ONLY", "evidencePath": "data/toolchain-registry.json", "limitations": "Image presence was verified; container execution was not required." }, { "tool": "Supabase pg_prove image", "detectedVersion": "supabase/pg_prove:3.36 and public.ecr.aws/supabase/pg_prove:3.36 image id eda7c5e68719", "installationMode": "container", "category": "Infrastructure, databases, and orchestration", "function": "Database testing image", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["docker image ls --format ... pg_prove"], "pipeline": ["infrastructure", "database", "version-inventory"], "status": "CONTAINER_ONLY", "evidencePath": "data/toolchain-registry.json", "limitations": "Image presence was verified; no database tests were run for this website task." }, { "tool": "Geth", "detectedVersion": "Geth Version: 1.17.4-stable; Git Commit: 36a7dc72e96b3f42846be925cfeb2fad18489917", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Chain client", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["geth version"], "pipeline": ["infrastructure", "chain-clients", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No chain safety or deployment claim follows from the client version." }, { "tool": "Besu", "detectedVersion": "besu/v26.6.1/linux-x86_64/openjdk-java-25", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Chain client", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["besu --version"], "pipeline": ["infrastructure", "chain-clients", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No chain safety or deployment claim follows from the client version." }, { "tool": "Erigon", "detectedVersion": "erigon version 3.5.1-bed215a4", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Chain client", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["erigon --version"], "pipeline": ["infrastructure", "chain-clients", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No chain safety or deployment claim follows from the client version." }, { "tool": "Reth", "detectedVersion": "Reth Version: 2.3.0; Commit SHA: 9384bc53d8c0c77e59cac83fdaaf3b372c6d2216", "installationMode": "native", "category": "Infrastructure, databases, and orchestration", "function": "Chain client", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["reth --version"], "pipeline": ["infrastructure", "chain-clients", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No chain safety or deployment claim follows from the client version." }, { "tool": "Codex CLI", "detectedVersion": "codex-cli 0.143.0", "installationMode": "native", "category": "Editor, AI, and source control", "function": "AI coding interface", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["codex --version"], "pipeline": ["source-control", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Editor/agent tooling is not presented as security assurance." }, { "tool": "VS Code", "detectedVersion": "1.128.0; commit fc3def6774c76082adf699d366f31a557ce5573f", "installationMode": "native", "category": "Editor, AI, and source control", "function": "Editor", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["code --version"], "pipeline": ["source-control", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Editor presence is not security tooling." }, { "tool": "VS Code Insiders", "detectedVersion": "1.129.0-insider; commit e7b83d54552fa9cb419c63fb24bde66f70addb60", "installationMode": "native", "category": "Editor, AI, and source control", "function": "Editor", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["code-insiders --version"], "pipeline": ["source-control", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "Editor presence is not security tooling." }, { "tool": "Git", "detectedVersion": "git version 2.53.0", "installationMode": "native", "category": "Editor, AI, and source control", "function": "Source control", "installed": true, "executed": true, "evidenceProduced": true, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["git --version", "git status --short", "git rev-parse HEAD"], "pipeline": ["source-control", "application-security", "version-inventory"], "status": "INSTALLED_EXECUTED_EVIDENCE_PRODUCING", "evidencePath": "data/site-evidence.json", "limitations": "Git records repository state; it does not prove deployed bytecode or production safety." }, { "tool": "Git LFS", "detectedVersion": "git-lfs/3.7.1", "installationMode": "native", "category": "Editor, AI, and source control", "function": "Large-file source control support", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["git-lfs version"], "pipeline": ["source-control", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No LFS artifact is part of the current website evidence." }, { "tool": "GitHub CLI", "detectedVersion": "gh version 2.46.0", "installationMode": "native", "category": "Editor, AI, and source control", "function": "GitHub automation", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["gh --version"], "pipeline": ["source-control", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No GitHub write operation was performed." }, { "tool": "Vim", "detectedVersion": "VIM - Vi IMproved 9.1; patches 1-948, 950-2141", "installationMode": "native", "category": "Editor, AI, and source control", "function": "Editor", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["vim --version"], "pipeline": ["source-control", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "Editor presence is not security assurance." }, { "tool": "Nano", "detectedVersion": "GNU nano, version 8.7.1", "installationMode": "native", "category": "Editor, AI, and source control", "function": "Editor", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["nano --version"], "pipeline": ["source-control", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "Editor presence is not security assurance." }, { "tool": "VS Code extensions", "detectedVersion": "mechatroner.rainbow-csv@3.24.1; ritwickdey.liveserver@5.7.10", "installationMode": "native", "category": "Editor, AI, and source control", "function": "Editor extension inventory", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:49:17Z", "commands": ["code --list-extensions --show-versions"], "pipeline": ["source-control", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "Extensions are not overclaimed as security tooling." }, { "tool": "Ripgrep", "detectedVersion": "ripgrep 15.1.0 (rev af60c2de9d)", "installationMode": "native", "category": "Supporting command-line tools", "function": "Search and discovery", "installed": true, "executed": true, "evidenceProduced": true, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["rg --version", "rg ..."], "pipeline": ["supporting-cli", "application-security", "version-inventory"], "status": "INSTALLED_EXECUTED_EVIDENCE_PRODUCING", "evidencePath": "data/site-evidence.json", "limitations": "Search results inform discovery; they are not security proof." }, { "tool": "jq", "detectedVersion": "jq-1.8.1", "installationMode": "native", "category": "Supporting command-line tools", "function": "JSON inspection", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["jq --version"], "pipeline": ["supporting-cli", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "Version captured only." }, { "tool": "fdfind", "detectedVersion": "fdfind 10.3.0", "installationMode": "native", "category": "Supporting command-line tools", "function": "File discovery", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["fd --version", "fdfind --version"], "pipeline": ["supporting-cli", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "The fd alias was unavailable; fdfind was available." }, { "tool": "Just", "detectedVersion": "just 1.45.0", "installationMode": "native", "category": "Supporting command-line tools", "function": "Command runner", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["just --version"], "pipeline": ["supporting-cli", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No website justfile is present." }, { "tool": "Hyperfine", "detectedVersion": "hyperfine 1.19.0", "installationMode": "native", "category": "Supporting command-line tools", "function": "Benchmarking", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["hyperfine --version"], "pipeline": ["supporting-cli", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "No benchmark was run for this website task." }, { "tool": "tmux", "detectedVersion": "tmux 3.6", "installationMode": "native", "category": "Supporting command-line tools", "function": "Session management", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["tmux -V"], "pipeline": ["supporting-cli", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "Session tooling is not security assurance." }, { "tool": "GNU Screen", "detectedVersion": "Screen version 4.09.01", "installationMode": "native", "category": "Supporting command-line tools", "function": "Session management", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["screen --version"], "pipeline": ["supporting-cli", "version-inventory"], "status": "INSTALLED_EXPLORATORY", "evidencePath": "data/toolchain-registry.json", "limitations": "Session tooling is not security assurance." }, { "tool": "rsync", "detectedVersion": "rsync 3.4.1 protocol version 32", "installationMode": "native", "category": "Supporting command-line tools", "function": "Transport and reproducibility support", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["rsync --version"], "pipeline": ["supporting-cli", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No transfer operation was performed." }, { "tool": "OpenSSH", "detectedVersion": "OpenSSH_10.2p1 Ubuntu-2ubuntu3.2; OpenSSL 3.5.5 27 Jan 2026", "installationMode": "native", "category": "Supporting command-line tools", "function": "Secure transport", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["ssh -V"], "pipeline": ["supporting-cli", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No hosts, keys, or connection details are exposed." }, { "tool": "curl", "detectedVersion": "curl 8.18.0 with OpenSSL 3.5.5", "installationMode": "native", "category": "Supporting command-line tools", "function": "HTTP transport", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["curl --version"], "pipeline": ["supporting-cli", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No request targets or credentials are exposed." }, { "tool": "wget", "detectedVersion": "GNU Wget 1.25.0", "installationMode": "native", "category": "Supporting command-line tools", "function": "HTTP transport", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["wget --version"], "pipeline": ["supporting-cli", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No download operation was performed." }, { "tool": "zip", "detectedVersion": "Zip 3.0", "installationMode": "native", "category": "Supporting command-line tools", "function": "Archive creation", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["zip -v"], "pipeline": ["supporting-cli", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No archive was created for this website task." }, { "tool": "unzip", "detectedVersion": "UnZip 6.00", "installationMode": "native", "category": "Supporting command-line tools", "function": "Archive extraction", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["unzip -v"], "pipeline": ["supporting-cli", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No archive was extracted for this website task." }, { "tool": "tar", "detectedVersion": "tar (GNU tar) 1.35", "installationMode": "native", "category": "Supporting command-line tools", "function": "Archive creation and extraction", "installed": true, "executed": true, "evidenceProduced": false, "lastVerifiedAt": "2026-07-12T19:46:58Z", "commands": ["tar --version"], "pipeline": ["supporting-cli", "version-inventory"], "status": "INSTALLED_AND_EXECUTED", "evidencePath": "data/toolchain-registry.json", "limitations": "No archive operation was performed for this website task." } ] }