V6 — Evidence Graph + Interaction Matrix

V5 shows where to look. V6 shows what is proven and what is unresolved.

Arkheionx v6 classifies the evidence on every high-impact surface and maps the dangerous interactions that still lack tests. V5 shows where research attention is weakest; V6 shows what evidence exists and what remains unresolved. The thesis is simple: no high-impact surface should remain unclassified. It does not predict bugs, assign severity, or run anything against a live chain.

Workflow

Classify the evidence, then close the unknowns.

arkheionx evidence-graph .
arkheionx interaction-matrix .
arkheionx unresolved-map .
arkheionx complete-review . --out .arkheionx/complete-review

arkheionx evidence-graph

Classify every important review surface into an evidence state: tested, rejected-with-evidence, confirmed-candidate, unresolved, insufficient-evidence, needs-human-review, unclassified, or out-of-scope.

arkheionx interaction-matrix

Detect meaningful combinations of surfaces that may hide bugs when tested together, scored by a transparent interaction priority. Interaction priority is not severity.

arkheionx unresolved-map

Show everything important that local evidence does not yet close: high-impact unresolved surfaces and interactions. Unresolved does not mean vulnerable.

arkheionx complete-review

Bundle the whole V6 review into one local, vendor-agnostic package for a human reviewer or an AI agent.

What it surfaces

An evidence state, not a verdict.

EV-013  CreditVault.withdraw   value-exit   criticality very-high
  Evidence state    needs-human-review
  Why               a test references this surface, but coverage is shallow
                    (file-level) on a high-impact surface
  Missing evidence  no-pre-post-balance-check, no-rounding-edge-test
  Do not claim      an evidence state is not a vulnerability claim

Not vulnerabilities

An evidence state is not a vulnerability claim. A confirmed-candidate is a review candidate, not a confirmed vulnerability. Interaction priority is not severity.

Local and static

No RPC, no live-chain action, no exploit automation, no auto-submit. Artifacts are written locally under .arkheionx/.

Human review required

V6 makes the unknowns visible. A human, with independent local proof, makes every security call. ArkheionX does not confirm vulnerabilities.

Boundary

V6 classifies evidence; it does not decide.

It does not predict bugs, assign final severity, or replace an audit. Unresolved does not mean vulnerable. Read the full guide in the repository's docs/V6_WORKFLOW.md, docs/EVIDENCE_GRAPH.md, and docs/INTERACTION_MATRIX.md.

See the evidence graph