Skip to content
Quantix Security Labs

Technical publications

Every completed research assessment is issued as a Quantix Technical Security Assessment: an A4 document with a stable identifier, version and publication date, generated from the same record as the assessment page. Assessments whose remediation review is still open have no document yet.
Published documents
9
Total pages
174
Under review
3
Illustration: bound assessment reports on a shelf, spines banded by severity, one volume open at its findings table.

Documents

Published documents

Newest first. Page counts and file sizes are those of the generated PDF.

Under review

Remediation review is open. The document is issued as version 1.0 when the review closes.

  • Arbalest Bridge

    QX-TSA-2026-005 · v0.9

    Under ReviewBridge Security Assessment · review ended 6 Oct 2026

  • Merivale Markets

    QX-TSA-2026-010 · v0.9

    Under ReviewSmart Contract Audit · review ended 11 Sept 2026

  • Axeline Bridge

    QX-TSA-2026-012 · v0.8

    Under ReviewBridge Security Assessment · review ended 28 Aug 2026

Template

Document structure

Every Technical Security Assessment follows the same structure, so documents can be compared section by section. A cover with document control and a contents page with page numbers precede section 1; every page carries the document ID, version and page number.
  1. Section 1

    Executive summary

    What was assessed, the headline findings and their remediation state, with the severity summary.

  2. Section 2

    Scope

    Repository, reviewed and remediation commits, files with non-comment source lines, and exclusions.

  3. Section 3

    Protocol architecture

    Components, their roles and trust levels, and the trust assumptions the assessment relies on.

  4. Section 4

    Threat model

    Assets, actors and threats, each threat linked to the findings that realise it.

  5. Section 5

    Methodology and severity classification

    Review activities and the impact-and-likelihood rubric used to rate findings.

  6. Section 6

    Findings summary

    Every finding with identifier, title, severity, category and status.

  7. Section 7

    Detailed findings

    Description, preconditions, exploit scenario, impact, recommendation, fix and resolution for each finding.

  8. Section 8

    Severity and risk analysis

    Severity matrix by likelihood and impact, and distribution by vulnerability class.

  9. Section 9

    Remediation status

    Status by severity, remediation progress and the residual open exposure.

  10. Section 10

    Formal verification and invariants

    Properties checked, the tool used and the result for each.

  11. Section 11

    Recommendations

    Engineering and operational recommendations beyond individual findings.

  12. Section 12

    Limitations

    What the assessment did not cover and the conditions its conclusions depend on.

  13. Appendix

    Technical appendix

    Tools, SHA-256 hashes of reviewed files, notes and methodology references.

Identifiers
QX-TSA-YYYY-NNN, assigned when an assessment starts and never reused.
Versions
Versions below 1.0 are under review; 1.0 is the first published document, later versions record remediation re-reviews.
Publication
“Published” is used only for documents generated on this site. Quantix research assessments are not client engagements or certifications.

Need a document your reviewers can verify?

Quantix documents are tied to commits, list every finding with its fix, and state what was out of scope.

Request an AuditBrowse assessments