Arkheionx v8.0.0 — Final Engine

Arkheionx v8.0.0 — Final Engine

Arkheionx v8.0.0 consolidates the product into one clean, local-first Ethereum
security research workflow for Solidity and DeFi repositories. It turns scope, value
flow, protocol behavior, invariants, and local evidence into focused review lanes
before report writing.

No RPC. No live-chain scanning. No auto-submit. Human review required.

Highlights

• One-command review. Adds the primary arkheionx review command. It builds a
  single local review pack — run context, scope map, value-flow map, interaction
  map, assumptions, review lanes, evidence tasks, evidence rubric, report filter,
  agent input, plus review.json and manifest.json.
• Protocol Lens Packs are generic. Lenses are presented as protocol-family
  models. Passing --lens fixed-credit-market adds protocol-aware artifacts
  (protocol model, behavior promises, economic invariants, temporal windows, lens
  review lanes, lens evidence tasks). The public surface is no longer
  target-specific.
• Schema-backed artifacts. Adds schemas/manifest.schema.json and
  schemas/review-pack.schema.json; review artifacts carry schema_version,
  arkheionx_version, artifact_type, and generated_at.
• Kill conditions. Every evidence task now carries a kill condition so a weak
  hypothesis can be dropped quickly.
• Cleaner surface. Reworked README, docs, and website; documented the
  heuristic exit-code-1 contract for CI.

Boundaries

• Arkheionx does not confirm vulnerabilities.
• Arkheionx does not replace audits.
• Arkheionx does not scan live chains.
• Arkheionx does not auto-submit reports.
• Arkheionx does not assign final severity.
• A review lane is not a vulnerability; evidence quality is not vulnerability
  validity; a candidate with evidence is not automatically valid. Human review and
  local proof are required.

Compatibility

The v4 review-map workflow and the v5/v6/v7/v7.5 commands continue to work. The new
arkheionx review command orchestrates these existing layers; it adds no new
analysis and changes no exit-code behavior.