Skip to content

Arkheionx v3.0.0 — Public Stable Launch

Choose a tag to compare

@Yudis-bit Yudis-bit released this 31 May 20:51
· 118 commits to main since this release

Arkheionx v3.0.0 — Public Stable Launch

Arkheionx v3.0.0 is the public stable launch of the local DeFi security
workbench. It is a consolidation milestone: it does not add new product
features. It documents, hardens, and presents the v2.x workbench as one coherent
public surface — so a researcher arriving from a link can install it, run a
guided demo, and understand exactly what Arkheionx does and does not do.

Release date: 2026-05-31. Package version 3.0.0. STABLE_RELEASE remains
v2.10.0 until v3.0.0 is published, then moves to v3.0.0 in post-release
cleanup. Not published to PyPI; no Homebrew, standalone binary, or domain
installer. Not a formal audit; no bounty or severity guarantee.

Summary

arkheionx version
Arkheionx package version: 3.0.0
Latest stable release: v2.10.0
Current milestone: v3.0.0
Next milestone: v3.1.0

Foundry proves behavior. Arkheionx helps researchers understand, prioritize,
package, and explain the evidence — locally, with no RPC and no secrets.

Why v3.0 matters

v3.0 is the first version meant to be shared widely. The command surface,
stability contract, install/update lifecycle, demo workflow, evidence model, and
safety boundaries are now documented and guarded by a release-readiness gate, so
the public surface stays coherent and honest as the project grows.

What changed since v2.10.0

  • Root README redesigned as a public-stable launch landing page.
  • Four v3 SVG visuals (architecture, public surface, demo fixtures, stability).
  • Public-surface, stability-contract, and v3-readiness docs matured to launch
    candidate; roadmap and release checklist updated for v3.0.0 / v3.1.0.
  • Readiness gate extended (GitHub Action tag and install/arkup stable tag track
    STABLE_RELEASE; required visuals exist; no stale dev wording on the live
    surface).
  • Version metadata set to 3.0.0. No CLI behavior, demo, package-data,
    proof/trace/evidence/report, or safety-boundary changes.

Public command surface

18 CLI commands and three shell scripts (install.sh, uninstall.sh, arkup)
are inventoried with stability labels in docs/PUBLIC_SURFACE.md.
A contract test fails if a command in arkheionx --help is missing from the doc.

Stability contract

docs/STABILITY_CONTRACT.md defines what is
stable at v3.0: public command names, additive JSON/schema changes, plain JSON
and artifacts, the install/update lifecycle, and never-weakened safety
boundaries. Human-readable output may be polished; internal Python modules are
not a public import API.

Install / update lifecycle

sh install.sh (pipx or venv, no sudo), sh arkup --check/--update, and
sh uninstall.sh. The install receipt and stable/main/ref/local source model are
unchanged. Local install is the supported path; there is no PyPI package.

Guided demos and package-data fixtures

Three bundled toy fixtures — oracle-staking, amm-swap, lending-vault — ship
as package data, so arkheionx demo --copy <id> <dest> works from an installed
Arkheionx. They are demonstrations, not real protocols or vulnerability reports.

Evidence model

HEURISTICCOMPILER_CONFIRMEDEXECUTION_CONFIRMEDEVIDENCE_READY.
A heuristic is a ranking signal, not a proven bug; a passing test does not prove
absence of bugs. Human review is required.

Artifact validation

arkheionx validate-artifacts checks generated proof/evidence/report artifacts
for required fields and safe evidence transitions. JSON output and artifact files
are always plain (no ANSI).

CLI color and output polish

Restrained, TTY-gated color (ARKHEIONX_COLOR=always|never|auto, honoring
NO_COLOR and CI). JSON output and files written under .arkheionx/out/ stay
plain.

Docs and visuals

A navigable docs map links the start path, core workflow, advanced topics, and
the stability/readiness docs. README carries four v3 SVG visuals plus the
workflow, evidence-ladder, and output-pipeline diagrams.

Release readiness gate

scripts/check_release_readiness.py --check aggregates version consistency,
docs links, and safety wording with readiness-specific checks and runs in
make validate.

Safety boundaries

  • Local repository analysis only; no RPC by default; no live-chain mutation; no
    private keys or secrets; no transaction broadcasting; no automated
    exploitation; no auto-submission.
  • No guaranteed vulnerability discovery; no severity guarantee; not an audit,
    certification, or replacement for manual review.
  • Use only on repositories you own or are authorized to review.

Known limitations

  • Heuristic-first; Foundry optional (without it the workbench stays in
    HEURISTIC mode); local-only; three bundled toy demos; not a formal audit.
  • Not published to PyPI; no Homebrew, standalone binary, or domain installer.

Upgrade

git pull
sh arkup --update          # or: pip install -e .
arkheionx version

Next

v3.1.0 — incremental workbench improvements after the v3.0.0 cut. See
docs/ROADMAP.md and docs/V3_READINESS.md.