PhantomCtx claims a Windows loader path for DLL redirection by replacing the mapped Activation Context section at the same address instead of overwriting PEB.ActivationContextData. The README gives concrete workflows for recon, spawn, runtime use, and an mpnotify.exe proxy-DLL demo, but the EDR bypass result remains a source claim rather than independent validation.