Sources

One pinned source tree, its documentation pages, one recorded capture, and the specifications, papers, and statutes, ranked by authority.

The pin is rea-agents 6.7.0, the npm package published on 2026-10-18, whose tag rea-agents-6.7.0 is commit 27dc42d10249f0410904a75c0997842eb03b931c of github.com/morluto/rea. The provider is Ghidra 12.1.4 with OpenJDK 21.0.12.1. The facts were verified on 2026-10-18 against a read-only checkout of that commit, and the source files of each section are paths in it.

The ranked sources

When two sources disagree, the higher one wins and the section says so.

Rank	Source	Used for	Source key
1	the rea source at `27dc42d`	every claim about how rea works	the file
2	the rea documentation at `27dc42d`	documented behaviour, limits, and the responsible use rules	`{{mcp ...}}`, `{{cli ...}}`, `{{install ...}}`, and the other keys below
3	the capture, recorded on 2026-10-18	every listing and every number in a figure	the file name
4	the format and architecture specifications	ELF, Mach-O, x86-64, AArch64, calling conventions	`{{spec ...}}`
5	papers on program analysis and decompiler evaluation	disassembly, lifting, type recovery, and the 2026 measurements	`{{paper ...}}` and a link
6	statutes and court decisions	the law of analysis and interoperability	`{{law ...}}`
7	tool release notes	Ghidra and other tool versions	the file

Every source key is declared without a local file, because no source file is copied into this repository. The facts were checked against the pinned tag when the manual was written, and the tag does not change.

The rea documentation

Key	Path in the rea repository
`readme`	`README.md`
`cli`	`docs/cli.md`
`mcp`	`docs/mcp-contracts.md`
`ghidra`	`docs/ghidra-provider.md`
`native`	`docs/native-investigation.md`
`install`	`docs/installation.md`
`readiness`	`docs/reconstruction-readiness.md`
`ledgers`	`docs/reconstruction-obligation-ledgers.md`
`jsgraph`	`docs/javascript-application-graph.md`
`design`	`docs/tool-design.md`

DISCLAIMER.md is at the root of the tag. Section 2.1 reads it.

The capture

The capture kit drove rea 6.7.0 and its MCP server on one Apple silicon Mac and wrote 69 files to its output folder. The host ran macOS 26.2, Node 22.22.0, Ghidra 12.1.4 from Homebrew, OpenJDK 21.0.12.1, Apple clang 17.0.0, and WABT 1.0.42, which inspect-wasm-artifact runs (the capture). The targets are programs written for this manual, and the fixture list holds the SHA-256 of each.

python3 capture/run.py --check recorded the whole set again into a temporary directory and compared it with the recorded set. The comparison masks timestamps, durations, ids, and temporary paths, and the 69 files matched. Evidence ids are content hashes and were compared unmasked. The proof files are not rea output: they hold the two proofs of lesson 36, run by the kit over ledger-x86_64-O1.o with the host clang.

Outside sources

Two external studies are cited in Parts 7 and 8 with their URLs. The first is Liu, Raff, and Micinski, When LLM Decompilers Recompile More and Preserve Less, arXiv 2609.05370, 2026. The second is Santos-Grueiro, When Binaries Talk Back, arXiv 2607.12507, 2026. Part 7 cites two specifications. They are the Intel 64 and IA-32 Architectures Software Developer's Manual, Volume 2, and the Arm Architecture Reference Manual for A-profile, DDI 0487.

rea (rea-agents) with the Ghidra provider rea-agents 6.7.0, Ghidra 12.1.4 · 27dc42d · 2026-10-18 · Edition 2026.10