Entry-Point Detection — Documentation Index
Stella Ops resolves every container image (and running container) to the single logical program it actually runs, with auditable evidence for each step. This is the entry point to that subsystem’s documentation. Engineers and operators integrating with EntryTrace, debugging a reduction, or extending a runtime detector should start here and jump to the focused guide they need.
Core guides
| Topic | Document |
|---|---|
| Problem statement & dual-mode architecture | entrypoint-problem.md |
| Static resolver (OCI layers, wrappers, scoring) | entrypoint-static-analysis.md |
| Dynamic resolver / Observational Exec Graph | entrypoint-dynamic-analysis.md |
| ShellFlow script reduction | entrypoint-shell-analysis.md |
| Runtime detector contracts & calibration | entrypoint-runtime-overview.md |
| Semantic analysis (intent, capabilities, threats) | entrypoint-semantic.md |
| Heuristic review cadence | entrytrace-cadence.md |
Runtime-family heuristics
| Runtime | Document |
|---|---|
| Java | entrypoint-lang-java.md |
| .NET / C# | entrypoint-lang-dotnet.md |
| Node.js | entrypoint-lang-node.md |
| Python | entrypoint-lang-python.md |
| PHP-FPM | entrypoint-lang-phpfpm.md |
| Ruby | entrypoint-lang-ruby.md |
| Go | entrypoint-lang-go.md |
| Rust | entrypoint-lang-rust.md |
| C/C++ | entrypoint-lang-ccpp.md |
| Nginx | entrypoint-lang-nginx.md |
| Deno | entrypoint-lang-deno.md |
| Elixir / Erlang (BEAM) | entrypoint-lang-elixir.md |
| Supervisors | entrypoint-lang-supervisor.md |
The detection system was decomposed from a single write-up into the focused guides above for easier maintenance. Each guide can be read independently.