Capstone: produce a defensible Mach-O analysis

Choose a course fixture or another Mach-O file you are authorized to analyze.

Produce an analysis package containing:

1. SHA-256 and basic file identity;
2. universal-container description if applicable;
3. parsed Mach header;
4. full load-command inventory;
5. segment/section map with file and virtual ranges;
6. dependency and dynamic-link summary;
7. symbol/runtime-metadata observations;
8. code-signing and entitlement observations;
9. three behavior hypotheses, each linked to concrete evidence;
10. at least one small parser or verification script you wrote;
11. a section titled What I cannot conclude from this evidence.

The last section is required. Technical competence includes knowing the boundary between evidence and inference.

Credential standard

A verified course credential should mean the learner completed the required lessons, passed the final assessment, and submitted the capstone evidence package.

The public credential will attest to course/version completion. It will not publish private learner artifacts unless the learner explicitly chooses to expose them.