A built-in method claims native but violates native-function invariants
br.native_invariant_violated · convicts
browserlayer
artifactcategory
1evaders caught
What it catches
A real built-in method is not a constructor (new throws) and has no own 'prototype' (verified on Chrome 136). A Proxy/wrapper spoof can fake the '[native code]' toString yet violate these, so it catches tampering that function_tostring_tampered misses. Only methods claiming native are checked. Ref CreepJS lies/native suite.
Signals it reads
browser.native_invariant_violated
How it fires
present
Evaders it caught 1
Bypassed by 10
Frontier evaders that reach the detector uncaught (scored only suspicious, defeating every convicting tell) — this check is not one that stops them. The red-team frontier this detection still has to convict.