{
  "added_at": "2026-10-18",
  "category": "community-case-studies",
  "description_en": "A Japanese field report connects REA 6.4.0 to Claude Code in a separate project directory, denies 43 of its 170 tools and common shell launch forms, and compares REA-enabled and REA-disabled runs on two real tasks: an Electron terminal’s packaged files and a saved HAR capture. Both arms answered correctly, while the REA arm took up to 2.00× the time and 1.67× the API-equivalent cost. It is an analysis-evaluation and safety-configuration case, not a reconstruction.",
  "description_zh": "一篇日文实践报告在单独的项目目录中把 REA 6.4.0 接入 Claude Code，屏蔽其 170 个工具中的 43 个以及常见的命令行启动方式，并在两个真实任务上比较启用与禁用 REA 的运行：一个 Electron 终端的分发文件，以及一份保存的 HAR 通信记录。两组都给出正确答案，而启用 REA 的一组耗时最多为 2.00 倍、按 API 计价的费用最多为 1.67 倍。这是分析评估与安全配置案例，而非重建案例。",
  "entry_url": "https://awesomerea.org/resources/rea-claude-code-isolated-ab-case/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/rea-claude-code-isolated-ab-case/",
  "evidence_url": "https://zenn.dev/keigoly/articles/8738d8d241b5a1",
  "group": "rea",
  "id": "rea-claude-code-isolated-ab-case",
  "json_url": "https://awesomerea.org/resources/rea-claude-code-isolated-ab-case/record.json",
  "kind": "case-study",
  "markdown_url": "https://awesomerea.org/resources/rea-claude-code-isolated-ab-case/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/rea-claude-code-isolated-ab-case/index.md",
  "name": "REA in Claude Code: an isolated static-analysis A/B trial",
  "name_zh": "Claude Code 中的 REA：隔离配置下的静态分析 A/B 试验",
  "record_type": "resource",
  "relationship": "community-reported-mixed-workflow",
  "requirement_facets": [
    "scope",
    "limits",
    "scope",
    "limits",
    "attribution"
  ],
  "requirements": [
    "The article by keigoly was published on Zenn on 2026-10-14 (JST). It pins REA 6.4.0 from the rea-agents package and runs it with a checksum-verified official Node.js 24.21.0 placed inside the project, because the host’s Homebrew Node 25.8.1 is outside REA’s supported range. All trials used non-interactive claude -p with Claude Opus 5.5 and permission prompts bypassed; the Claude Code version is not stated.",
    "Isolation is configuration, not a sandbox: REA is enabled only through a project-local .mcp.json, a generated deny list blocks 43 tools selected from effect metadata, and Bash prefix rules block common package-runner launches. The author states that deny rules are a fence rather than isolation, that other invocation forms bypass the prefix rules, and that prompt injection through analysis output was not tested.",
    "The tasks were MIT-licensed Orca terminal v1.4.224 (128 MB of distributed Electron files) and a 2.5 MB HAR from an unnamed venue website; answers were checked against Orca’s public source and the HAR data. The author excluded DRM or license circumvention, online multiplayer games, business or customer data and malware from scope.",
    "Each condition ran once (n=1), the REA arm was told to prefer REA tools, parallel processes make timings approximate, and only static JavaScript/web work with one model was tested; an interrupted run was excluded and repeated. One REA analysis result exceeded the 10 MB MCP response limit. Scripts and JSONL logs are excerpted rather than published.",
    "The author reports that REA helped with extraction, such as asar unpacking and HAR element extraction, while grep and small scripts carried code reading in both arms. Nothing was reconstructed: the HAR task identified an existing request path. Native binaries and APKs are deferred to a planned second step; Orca, the venue site, REA and the model service keep their own terms."
  ],
  "requirements_zh": [
    "文章由 keigoly 于 2026-10-14（日本时间）发布在 Zenn。它固定使用 rea-agents 软件包中的 REA 6.4.0，并在项目内放置经校验和核对的官方 Node.js 24.21.0 来运行，因为本机 Homebrew 的 Node 25.8.1 不在 REA 支持范围内。所有试验均使用非交互的 claude -p、Claude Opus 5.5，并跳过权限确认；文章未说明 Claude Code 版本。",
    "隔离依靠配置而非沙箱：REA 只通过项目内的 .mcp.json 启用，按效果元数据生成的拒绝列表屏蔽 43 个工具，Bash 前缀规则拦截常见的包运行器启动方式。作者明确表示拒绝规则只是围栏而非隔离，其他调用写法可以绕过前缀规则，且未测试经由分析输出进行的提示注入。",
    "任务对象是 MIT 许可的 Orca 终端 v1.4.224（128 MB 的 Electron 分发文件），以及一个未具名会场网站的 2.5 MB HAR；答案依据 Orca 公开源码和 HAR 数据核对。作者将 DRM 或许可认证规避、在线对战游戏、业务或客户数据以及恶意软件排除在范围之外。",
    "每种条件只运行一次（n=1），启用 REA 的一组被要求优先使用 REA 工具，多个进程并行运行使耗时只能作参考，且只测试了单一模型下的静态 JavaScript／Web 工作；一次中断的运行被剔除并重做。有一项 REA 分析结果超过了 MCP 的 10 MB 响应上限。脚本和 JSONL 日志只以摘录形式出现而未公开。",
    "作者报告 REA 在提取环节（如展开 asar、从 HAR 中提取元素）有所帮助，而两组的代码阅读都主要依靠 grep 和小脚本。没有重建任何内容：HAR 任务确认的是一条已有的请求路径。原生二进制和 APK 留待计划中的第二步；Orca、会场网站、REA 及模型服务保留各自条款。"
  ],
  "targets": [
    "app",
    "website"
  ],
  "url": "https://zenn.dev/keigoly/articles/8738d8d241b5a1",
  "verification": "source-reviewed",
  "verified_at": "2026-10-18"
}