What it can't tell you
sourcetruth is honest about its edges. It won't tell you:
- Whether anything is a bug. It draws what the code does; you judge it.
- Runtime facts — which contract id a caller will actually pass, who holds a role, what a proxy currently points at, what a price is.
- Which branch runs. An action that archives a contract and creates one is shown as possibly replacing it and possibly ending it.
- Arithmetic — overflow, rounding and decimals are out of scope.
- Inside a blind spot. A
delegatecallto a caller's address or an assemblycallis shown and named, never followed. - Code that isn't on disk. Missing imports are reported, and the functions that depend on them are marked. Nothing is guessed.
- What a comment claims. Comments are stripped before anything is read.