COLLECTION
I have added behavioral analysis using Jev to my custom sandbox, Izanagi. This explains the correlation between attempts to access credentials and HTTP POST requests, the features transmitted externally, validation of Choice responses, handling of withdrawals and failures, and the verification results obtained with the actual model and QEMU.
This explains what can be achieved with the custom development sandbox Izanagi. It covers isolated execution of commands, recording and detecting system calls, controlling DNS and HTTPS traffic, secret substitution, and operations from MCP, described in line with the current implementation and verification records.
I investigated how authentication works with a YubiKey touch. I organized information on FIDO2 public keys and signatures, how the browser verifies the authentication target, the roles of PIN and biometric fingerprint, the differences from OTP, why it operates without a battery, and even the process of registering a backup key.
We identified pathways from the internal host function visible on the Omoikane page that could reach DOM, cookies, or storage of a different origin. This covers bootstrap isolation, origin verification on the Rust side, and related processing and testing.