halligan

A forced-entry instrument for binaries. Reverse engineering, fact-store-centric, LLM-native.

source · MIT OR Apache-2.0

The premise: do not rewrite Ghidra—make Ghidra an implementation detail. Externalize reverse-engineering state into a Rust-native fact model. Use backends as oracles behind stable interfaces. The fact store is the artifact; the engine is the supplier. The LLM is the primary operator—typed tools, owned facts, claims with evidence, oracles for verification.

docs in progress.