AwesomeREA.org

Integration

Reverify

Python CLI and stdio MCP server that checks a model’s structured claims about a binary, such as bytes or typed values at an offset, strings, imports and exports, instruction mnemonics, emulation results and tested or Z3-proved equivalence, and returns VERIFIED, REFUTED or INCONCLUSIVE with the evidence the tools observed. Grounded and refuted results are kept in a per-binary ledger on disk, so a reset or later session resumes from them instead of from a summary, and a reconstruct loop has a model propose claims until an informative set verifies. A separate rollover command replaces context compaction in Claude Code, Codex, Gemini CLI or OpenCode with file hand-offs and fresh sessions.

Requirements and limitations

  • The reviewed main commit is 25 commits after the v0.11.0 GitHub release of 2026-09-04; PyPI’s newest version is 0.10.0, and the README’s status section still describes v0.9.0. The core is pure Python with no dependencies, and pyproject.toml declares Python 3.8+. The full extra adds capstone, unicorn, lief and z3-solver, and the angr extra adds the function, call and cross-reference claims, which return INCONCLUSIVE without an engine. The toolkit also parses PE, ELF and Mach-O files, scans byte patterns, decodes Protobuf and TLV data and generates Frida hook scripts.
  • The verifier and benchmarks need no model. reconstruct calls an OpenAI-compatible endpoint configured by OPENAI_API_KEY, OPENAI_BASE_URL and OPENAI_MODEL, orchestrate can drive Claude through the Claude Agent SDK on a Claude Code login, and the MCP server gives any MCP client parsing, disassembly, pattern-scan, semantic, claim, ledger and checkpoint tools. Ledgers and checkpoints are written under .reverify in the working directory. Users supply the binaries to analyse; the repository holds benchmark sources and result records, not target binaries.
  • reverify rollover install edits the user settings of each supported CLI it finds to add hooks and switch off native compaction, keeping backups and offering uninstall. The README warns that a Claude Code or Codex session not started through its launcher can then grow without limit, and reports one session that reached 909k tokens.
  • The headline benchmark applies a fixed textbook push rbp; mov rbp, rsp prologue guess, not a live model, to the entry points of system binaries. BENCHMARK.md reports that guess refuted on 69 of 71 Windows 11 files and never falsely verified, and 0 false VERIFIED among 475 known-false claims on 50 Windows binaries; CI repeats both checks on Linux, Windows and macOS and fails on any false VERIFIED. The author notes that 0 of N bounds the error rate rather than proving it zero. These are project-reported results; this collection ran none of them.
  • MIT. SECURITY.md limits use to authorised work such as malware analysis, CTF, interoperability research and software the user owns or may analyse, and excludes circumventing licensing or copy protection on software the user does not own or license. The reviewed sources establish no REA connection.

About this entry

Type
Integration
Category
Independent agent workflows
Relationship
Independent agent integration
Targets
Binary

Sources reviewed

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Primary sources

  1. README.md GitHub · 2akouwu/reverify · Revision f32ea84
  2. BENCHMARK.md GitHub · 2akouwu/reverify · Revision f32ea84
  3. EXAMPLE.md GitHub · 2akouwu/reverify · Revision f32ea84
  4. pyproject.toml GitHub · 2akouwu/reverify · Revision f32ea84
  5. reverify/mcp_server.py GitHub · 2akouwu/reverify · Revision f32ea84
  6. reverify/agent.py GitHub · 2akouwu/reverify · Revision f32ea84
  7. reverify/ledger.py GitHub · 2akouwu/reverify · Revision f32ea84
  8. .github/workflows/ci.yml GitHub · 2akouwu/reverify · Revision f32ea84
  9. SECURITY.md GitHub · 2akouwu/reverify · Revision f32ea84
  10. LICENSE GitHub · 2akouwu/reverify · Revision f32ea84
  11. https://github.com/2akouwu/reverify/releases/tag/v0.11.0
  12. https://pypi.org/project/reverify/0.10.0/