Documentation

The corpus

The definitive Mutant corpus, rendered from the repository's own markdown. Filter here, or open advanced search for full-text ranking.

Sections

Overview Big-picture explanations, quick reference material, and definitive orientation docs. Reference Canonical policies, reference sheets, migration matrices, and source-of-truth documentation. Runtime Bytecode, VM, polymorphism, and execution internals. Security Tamper resistance, sandboxing, remote scan policy, and security deep dives. Tooling Editor integration, implementation workflow, and operational runbooks.

Every document

Advanced search ↗

Reference · docs/CAPABILITY_REFERENCE.md Mutant Capability Reference This is the canonical, category-grouped catalog of every Mutant builtin. There are currently 409 registered builtins across 33 capability categories.Runtime · docs/BYTECODE_IR.md Mutant IR / ByteCode Reference Mutant compiles to a flat, linear byte stream. There is no intermediate representation between the AST and the bytecode – the compiler walks the AST and emits bytes directly.Tooling · docs/IMPLEMENTATION_GUIDE.md Security Implementation Guide (Current + Next Steps) This guide explains what to implement next without repeating already completed migrations.Security · docs/SECURITY_LLD.md Security Low-Level Design (LLD) This document defines the low-level security design for Mutant's bytecode generation, signing, transport, loading, verification, runtime execution, anti-debugging, integrity monitoring, and telemetry…Overview · docs/WHAT_IS_MUTANT.md What Is Mutant? Mutant is a programming language built for practical security work, forensic automation, and cross-platform analysis tooling.Reference · docs/MUTANT_LANGUAGE_REFERENCE.md Mutant Language Reference This document is the practical reference for Mutant language features, reserved keywords, and builtins.Security · docs/SECURITY_DIAGRAMS.md Security Architecture Diagrams (Code-Synced) Visual reference for how Mutant's runtime security pipeline, policy decisions, and probe gates fit together, kept in sync with current code behavior.Reference · docs/WASM_REPL_REFERENCE.md Mutant WASM REPL Definitive Guide The WASM REPL runs the same compiler and virtual machine the CLI runs, over a capability-restricted builtin set, and keeps one persistent session.Overview · docs/DETAILED_EXPLANATIONS.md Detailed Security Explanations (Current Behavior) This document explains the main security building blocks in simple language.Reference · docs/QUICK_REFERENCE.md Mutant Security Quick Reference Mutant now ships with layered anti-tamper and hardening controls for the signed artifact, runtime, and risky builtins.Runtime · docs/POLYMORPHIC_BYTECODE_LLD.md Polymorphic Bytecode LLD (Current + Roadmap) This LLD explains the real status of Mutant polymorphic bytecode support and the safe path to expand it.Security · docs/SECURITY_RUNBOOK.md Security Runbook This runbook explains how to triage and respond to Mutant runtime security events using current code behavior.Security · docs/SECURITY_ANSWERS.md Security Answers (Current Code) This FAQ is the student-friendly, code-accurate version of Mutant security behavior.Security · docs/SECURITY_ENHANCEMENTS.md Security Enhancements Roadmap (Code-Synced) This document tracks enhancement work from current implementation to future hardening.Runtime · docs/BINARY_ARTIFACT_SECURITY_DEEP_DIVE.md Binary Artifact Security Deep Dive This deep dive covers binary artifact security for Mutant from generation to runtime load.Tooling · docs/LSP_EXTENSION_ONBOARDING_60_MIN.md Mutant LSP + VS Code Extension Onboarding in 60 Minutes This guide is a practical first-hour path for a junior engineer to understand, run, debug, and safely modify Mutant language tooling.Security · docs/SANDBOX_DETECTION.md Sandbox Detection Feature The sandbox detection module identifies containerized and virtualized runtimes and feeds that signal into the runtime tamper-response pipeline.Security · docs/ANTITAMPER_PROBE.md Anti-Tamper Probe Integration This document explains how anti-tamper probes work today in Mutant, including the exact enablement gates and how runner enforcement differs from builtin diagnostic calls.Tooling · docs/LSP_EXTENSION_LLD.md Mutant LSP + VS Code Extension Low-Level Design (LLD) This is the implementation-level developer guide for the Mutant language tooling stack.Security · docs/ANTITAMPER_PROBE_ENABLEMENT_LLD.md Anti-Tamper Probe Enablement LLD This LLD defines how anti-tamper probe execution is enabled, how runner enforcement is gated, and how diagnostics differ from enforcement.Security · docs/PROCESS_INJECTION_DETECTION_LLD.md Process Injection Detection LLD This Low Level Design (LLD) explains how Mutant currently detects process injection-related tampering and how to expand this into a richer, multi-process detector in the future.Security · docs/REMOTE_PROCESS_SCAN_DEEP_DIVE.md Remote Process Scan Deep Dive This document describes the current remote process scan architecture and integration points.Security · docs/SECURITY_LLD_TRACEABILITY.md Security LLD Traceability Matrix This document provides end-to-end traceability from security design intent to concrete implementation and validation.Reference · docs/GRAPH_DATABASE.md Graph Database The db builtins embed a property graph database in the mutant runtime for modeling entities and the relationships between them: people and documents in a knowledge graph, or processes, files, and…Reference · docs/SECURE_NETWORKING.md Secure Networking & Traffic Interception Mutant ships a networking toolkit in its standard library so that tools such as TLS clients/servers and mitmproxy-style interception proxies can be written entirely in Mutant source.Reference · docs/STRUCTURED_DATA.md Structured Data: JSON, Encoding, Compression & Conversion Every fallible builtin here follows the language convention of returning (result, err); destructure with let value, err = ... and check err before touching value.Reference · docs/RUNTIME_INTEGRATION.md Runtime Integration: Embedding Lua Mutant can embed and run Lua scripts from a string, a file, or a remote HTTP endpoint.