REA

Use REA when a claim depends on a shipped binary or package, decompilation, passive application runtime evidence, controlled replay, or comparison with behavior not established by available source. For ordinary analysis of a complete source repository, use normal repository tools and do not run REA readiness or provider commands.

Route the target first

Choose the first tool from the target the user supplied. Do not call open_binary unless the target is native or an analysis database.