COLLECTION

2026

After implementing Omoikane’s DOM and exception notifications, we ended up investigating copying and garbage‑collection lifetimes as well.

This article provides a detailed overview of the DOM manipulation, HTML parsing, sanitizer, and exception/Promise‑rejection notifications added in Omoikane’s PR #1322. It traces the garbage‑collection lifetime issue that arose in Boa’s Promise.finally, examines iframe navigation and document ownership, discusses copy reduction, local measurements and the final CI run, and outlines the remaining challenges.

→

Integrating Jev into Izanagi’s behavioral analysis

I have added behavioral analysis using Jev to my custom sandbox, Izanagi. This explains the correlation between attempts to access credentials and HTTP POST requests, the features transmitted externally, validation of Choice responses, handling of withdrawals and failures, and the verification results obtained with the actual model and QEMU.

→

What can be done with Izanagi

This explains what can be achieved with the custom development sandbox Izanagi. It covers isolated execution of commands, recording and detecting system calls, controlling DNS and HTTPS traffic, secret substitution, and operations from MCP, described in line with the current implementation and verification records.

→

WeakMap and Generational Garbage Collection

This article explains the issue that occurred in the Rust‑based JavaScript engine Boa, where references via ephemerons were incorrectly reclaimed by the generational garbage collector. It covers the conditions for retaining WeakMap values, the calculation of fixed points, the recording of writes from older parents to younger children, the reasons references were lost after a major GC, and the regression tests that tracked the problem.

→

What is a WeakMap?

This article explains how JavaScript’s WeakMap does not retain its keys, comparing it with a regular Map and using code examples. It covers auxiliary information for objects, key identity, the reason it cannot be enumerated, references from values to keys, and handling of ephemerons.

→

I investigated how the YubiKey works.

I investigated how authentication works with a YubiKey touch. I organized information on FIDO2 public keys and signatures, how the browser verifies the authentication target, the roles of PIN and biometric fingerprint, the differences from OTP, why it operates without a battery, and even the process of registering a backup key.

→