From d0b198bf123d51e4cc3bf24bbd2d7404e4e70f35 Mon Sep 17 00:00:00 2001
From: Simone Avogadro <simone@avogadro.me>
Date: Fri, 2 Oct 2026 00:39:43 +0200
Subject: [PATCH] data(registry): corpus detection-only entries
 tiktok-business, bigo-ads, apm-insight, kidoz

Add the four DESIGN 3.3 commit-7b entries (Q1): detection-only, no
targets, manifest_components or protected_patterns, so registry-scan and
neutralize.sh ignore them and the audit (commit 8) gains visibility on
5-6 corpus apps each.

- tiktok-business (attribution, com.tiktok): marker TikTokBusinessSdk,
  verified in af1945, blockcraft, bulldozer, ttom2 (pristine decodes)
- bigo-ads (ads, sg.bigo.ads): marker BigoAdSdk (af1945, bulldozer),
  namespace sg.bigo
- apm-insight (crash_reporting, com.apm.insight): no detection facts
- kidoz (ads, net.kidoz): marker net.kidoz.sdk.Kidoz (subway), domain
  kidoz.net; com.kpadplayer stays out of packages (Q2) so the Subway
  com.kpadplayer.sdk wrapper candidate is kept

Gate: detect-adwrapper (sh with and without --registry, ps1) and
registry-scan goldens are byte-identical on the corpus, so all four
entries stay in this commit.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PZEKWAFaRKUy4hJ4rjFCzc
---
 .../sdk-neutralizer/registry/apm-insight.json     | 11 +++++++++++
 .../skills/sdk-neutralizer/registry/bigo-ads.json | 15 +++++++++++++++
 .../skills/sdk-neutralizer/registry/kidoz.json    | 15 +++++++++++++++
 .../sdk-neutralizer/registry/tiktok-business.json | 14 ++++++++++++++
 4 files changed, 55 insertions(+)
 create mode 100644 plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/apm-insight.json
 create mode 100644 plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/bigo-ads.json
 create mode 100644 plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/kidoz.json
 create mode 100644 plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/tiktok-business.json

diff --git a/plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/apm-insight.json b/plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/apm-insight.json
new file mode 100644
index 0000000..e8eb958
--- /dev/null
+++ b/plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/apm-insight.json
@@ -0,0 +1,11 @@
+{
+  "$schema": "./_schema.json",
+  "sdk_id": "apm-insight",
+  "display_name": "ByteDance APM Insight",
+  "vendor": "ByteDance",
+  "category": "crash_reporting",
+  "description": "Detection-only (no targets): registry-scan.py and neutralize.sh ignore it. Crash / performance monitor bundled with Pangle (see registry-backlog.md).",
+  "packages": [
+    "com.apm.insight"
+  ]
+}
diff --git a/plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/bigo-ads.json b/plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/bigo-ads.json
new file mode 100644
index 0000000..4d7ca09
--- /dev/null
+++ b/plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/bigo-ads.json
@@ -0,0 +1,15 @@
+{
+  "$schema": "./_schema.json",
+  "sdk_id": "bigo-ads",
+  "display_name": "BIGO Ads",
+  "vendor": "BIGO Technology",
+  "category": "ads",
+  "description": "Detection-only (no targets): registry-scan.py and neutralize.sh ignore it (see registry-backlog.md).",
+  "packages": [
+    "sg.bigo.ads"
+  ],
+  "detection": {
+    "marker_classes": ["sg.bigo.ads.BigoAdSdk"],
+    "namespace_roots": ["sg.bigo"]
+  }
+}
diff --git a/plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/kidoz.json b/plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/kidoz.json
new file mode 100644
index 0000000..7b4173a
--- /dev/null
+++ b/plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/kidoz.json
@@ -0,0 +1,15 @@
+{
+  "$schema": "./_schema.json",
+  "sdk_id": "kidoz",
+  "display_name": "Kidoz",
+  "vendor": "Kidoz",
+  "category": "ads",
+  "description": "Detection-only (no targets): registry-scan.py and neutralize.sh ignore it. com.kpadplayer is deliberately not in packages: it would become a detect-adwrapper exclusion and hide the com.kpadplayer.sdk wrapper candidate (see registry-backlog.md).",
+  "packages": [
+    "net.kidoz"
+  ],
+  "detection": {
+    "marker_classes": ["net.kidoz.sdk.Kidoz"],
+    "domains": ["kidoz.net"]
+  }
+}
diff --git a/plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/tiktok-business.json b/plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/tiktok-business.json
new file mode 100644
index 0000000..8b2e7d7
--- /dev/null
+++ b/plugins/android-reverse-engineering/skills/sdk-neutralizer/registry/tiktok-business.json
@@ -0,0 +1,14 @@
+{
+  "$schema": "./_schema.json",
+  "sdk_id": "tiktok-business",
+  "display_name": "TikTok Business SDK",
+  "vendor": "TikTok (ByteDance)",
+  "category": "attribution",
+  "description": "Detection-only (no targets): registry-scan.py and neutralize.sh ignore it. App-event / conversion tracking to TikTok Ads (see registry-backlog.md).",
+  "packages": [
+    "com.tiktok"
+  ],
+  "detection": {
+    "marker_classes": ["com.tiktok.TikTokBusinessSdk"]
+  }
+}