Arkheionx v3.0.0 — Public Stable Launch
Arkheionx v3.0.0 — Public Stable Launch
Arkheionx v3.0.0 is the public stable launch of the local DeFi security
workbench. It is a consolidation milestone: it does not add new product
features. It documents, hardens, and presents the v2.x workbench as one coherent
public surface — so a researcher arriving from a link can install it, run a
guided demo, and understand exactly what Arkheionx does and does not do.
Release date: 2026-05-31. Package version
3.0.0.STABLE_RELEASEremains
v2.10.0until v3.0.0 is published, then moves tov3.0.0in post-release
cleanup. Not published to PyPI; no Homebrew, standalone binary, or domain
installer. Not a formal audit; no bounty or severity guarantee.
Summary
arkheionx version
Arkheionx package version: 3.0.0
Latest stable release: v2.10.0
Current milestone: v3.0.0
Next milestone: v3.1.0
Foundry proves behavior. Arkheionx helps researchers understand, prioritize,
package, and explain the evidence — locally, with no RPC and no secrets.
Why v3.0 matters
v3.0 is the first version meant to be shared widely. The command surface,
stability contract, install/update lifecycle, demo workflow, evidence model, and
safety boundaries are now documented and guarded by a release-readiness gate, so
the public surface stays coherent and honest as the project grows.
What changed since v2.10.0
- Root README redesigned as a public-stable launch landing page.
- Four v3 SVG visuals (architecture, public surface, demo fixtures, stability).
- Public-surface, stability-contract, and v3-readiness docs matured to launch
candidate; roadmap and release checklist updated for v3.0.0 / v3.1.0. - Readiness gate extended (GitHub Action tag and install/arkup stable tag track
STABLE_RELEASE; required visuals exist; no stale dev wording on the live
surface). - Version metadata set to
3.0.0. No CLI behavior, demo, package-data,
proof/trace/evidence/report, or safety-boundary changes.
Public command surface
18 CLI commands and three shell scripts (install.sh, uninstall.sh, arkup)
are inventoried with stability labels in docs/PUBLIC_SURFACE.md.
A contract test fails if a command in arkheionx --help is missing from the doc.
Stability contract
docs/STABILITY_CONTRACT.md defines what is
stable at v3.0: public command names, additive JSON/schema changes, plain JSON
and artifacts, the install/update lifecycle, and never-weakened safety
boundaries. Human-readable output may be polished; internal Python modules are
not a public import API.
Install / update lifecycle
sh install.sh (pipx or venv, no sudo), sh arkup --check/--update, and
sh uninstall.sh. The install receipt and stable/main/ref/local source model are
unchanged. Local install is the supported path; there is no PyPI package.
Guided demos and package-data fixtures
Three bundled toy fixtures — oracle-staking, amm-swap, lending-vault — ship
as package data, so arkheionx demo --copy <id> <dest> works from an installed
Arkheionx. They are demonstrations, not real protocols or vulnerability reports.
Evidence model
HEURISTIC → COMPILER_CONFIRMED → EXECUTION_CONFIRMED → EVIDENCE_READY.
A heuristic is a ranking signal, not a proven bug; a passing test does not prove
absence of bugs. Human review is required.
Artifact validation
arkheionx validate-artifacts checks generated proof/evidence/report artifacts
for required fields and safe evidence transitions. JSON output and artifact files
are always plain (no ANSI).
CLI color and output polish
Restrained, TTY-gated color (ARKHEIONX_COLOR=always|never|auto, honoring
NO_COLOR and CI). JSON output and files written under .arkheionx/out/ stay
plain.
Docs and visuals
A navigable docs map links the start path, core workflow, advanced topics, and
the stability/readiness docs. README carries four v3 SVG visuals plus the
workflow, evidence-ladder, and output-pipeline diagrams.
Release readiness gate
scripts/check_release_readiness.py --check aggregates version consistency,
docs links, and safety wording with readiness-specific checks and runs in
make validate.
Safety boundaries
- Local repository analysis only; no RPC by default; no live-chain mutation; no
private keys or secrets; no transaction broadcasting; no automated
exploitation; no auto-submission. - No guaranteed vulnerability discovery; no severity guarantee; not an audit,
certification, or replacement for manual review. - Use only on repositories you own or are authorized to review.
Known limitations
- Heuristic-first; Foundry optional (without it the workbench stays in
HEURISTICmode); local-only; three bundled toy demos; not a formal audit. - Not published to PyPI; no Homebrew, standalone binary, or domain installer.
Upgrade
git pull
sh arkup --update # or: pip install -e .
arkheionx versionNext
v3.1.0 — incremental workbench improvements after the v3.0.0 cut. See
docs/ROADMAP.md and docs/V3_READINESS.md.