Initial project state: .NET reference, design, Rust port (M0+M1), evidence

Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/MxNativeClient/ObjectExporterClient.cs

@@ -0,0 +1,82 @@
+namespace MxNativeClient;
+
+public sealed class ObjectExporterClient
+{
+    private readonly string _host;
+    private readonly int _port;
+
+    public ObjectExporterClient(string host = "127.0.0.1", int port = 135)
+    {
+        _host = host;
+        _port = port;
+    }
+
+    public ResolveOxidFailure ResolveOxidUnauthenticated(ulong oxid, IReadOnlyList<ushort>? requestedProtseqs = null)
+    {
+        using var client = new DceRpcTcpClient(_host, _port);
+        client.Connect();
+        var bind = client.Bind(ObjectExporterMessages.IObjectExporter, versionMajor: 0, versionMinor: 0);
+        if (bind.PacketType != DceRpcPacketType.BindAck)
+        {
+            throw new InvalidOperationException($"Unexpected bind response packet type {bind.PacketType}.");
+        }
+
+        byte[] request = ObjectExporterMessages.EncodeResolveOxidRequest(
+            oxid,
+            requestedProtseqs ?? [ObjectExporterMessages.ProtseqNcacnIpTcp]);
+
+        var response = client.Call(contextId: 0, ObjectExporterMessages.ResolveOxidOpnum, request);
+        return ObjectExporterMessages.ParseResolveOxidFailure(response.StubData.Span);
+    }
+
+    public DceRpcResponsePdu ResolveOxidWithNtlmConnect(ulong oxid, IReadOnlyList<ushort>? requestedProtseqs = null)
+    {
+        using var client = new DceRpcTcpClient(_host, _port);
+        client.Connect();
+        var bind = client.BindWithNtlmConnect(ObjectExporterMessages.IObjectExporter, versionMajor: 0, versionMinor: 0);
+        if (bind.PacketType != DceRpcPacketType.BindAck)
+        {
+            throw new InvalidOperationException($"Unexpected bind response packet type {bind.PacketType}.");
+        }
+
+        byte[] request = ObjectExporterMessages.EncodeResolveOxidRequest(
+            oxid,
+            requestedProtseqs ?? [ObjectExporterMessages.ProtseqNcacnIpTcp]);
+
+        return client.CallBound(ObjectExporterMessages.ResolveOxidOpnum, request);
+    }
+
+    public DceRpcResponsePdu ResolveOxidWithNtlmPacketIntegrity(ulong oxid, IReadOnlyList<ushort>? requestedProtseqs = null)
+    {
+        using var client = new DceRpcTcpClient(_host, _port);
+        client.Connect();
+        var bind = client.BindWithNtlmPacketIntegrity(ObjectExporterMessages.IObjectExporter, versionMajor: 0, versionMinor: 0, targetName: _host);
+        if (bind.PacketType != DceRpcPacketType.BindAck)
+        {
+            throw new InvalidOperationException($"Unexpected bind response packet type {bind.PacketType}.");
+        }
+
+        byte[] request = ObjectExporterMessages.EncodeResolveOxidRequest(
+            oxid,
+            requestedProtseqs ?? [ObjectExporterMessages.ProtseqNcacnIpTcp]);
+
+        return client.CallBound(ObjectExporterMessages.ResolveOxidOpnum, request);
+    }
+
+    public DceRpcResponsePdu ResolveOxidWithManagedNtlmPacketIntegrity(ulong oxid, IReadOnlyList<ushort>? requestedProtseqs = null)
+    {
+        using var client = new DceRpcTcpClient(_host, _port);
+        client.Connect();
+        var bind = client.BindWithManagedNtlmPacketIntegrity(ObjectExporterMessages.IObjectExporter, versionMajor: 0, versionMinor: 0);
+        if (bind.PacketType != DceRpcPacketType.BindAck)
+        {
+            throw new InvalidOperationException($"Unexpected bind response packet type {bind.PacketType}.");
+        }
+
+        byte[] request = ObjectExporterMessages.EncodeResolveOxidRequest(
+            oxid,
+            requestedProtseqs ?? [ObjectExporterMessages.ProtseqNcacnIpTcp]);
+
+        return client.CallBound(ObjectExporterMessages.ResolveOxidOpnum, request);
+    }
+}