CESuite v0.2.2 — Address Evidence Inspector
Added
- Address Evidence Inspector for read-only inspection of a single address.
- Module + RVA evidence and bounded memory-region metadata.
- Conservative byte inspection with a maximum of 64 bytes.
- Whitelist-based x86/x64 instruction decoding.
- Memory operand and stack-reference evidence.
- Effective-address calculation only when it can be derived without runtime register state.
- Advisory Float/Double evidence for supported scalar SSE/x87 instructions.
- Separate
address-evidence.schema.json. - JSON copy/export for Address Evidence.
Improved
- CESuite menu organization with native Cheat Engine 7.72 icons and graceful text-only fallback on unvalidated versions.
- Detached/stale-target detection now fails closed instead of treating cached process metadata as live evidence.
Safety / Evidence Model
- Observation-only.
- No memory writes.
- No breakpoints or watchpoints.
- No table mutation.
- No automatic patching or repair.
- Static and unavailable evidence is never promoted to observed runtime evidence.
Validation
- 352 automated checks passed with 0 failures and 0 skips.
- Live validation performed with Cheat Engine 7.72.
- Release artifacts independently audited and reproducibly built.