Code complexity vs audit coverage

Evidence summary #

Cannot compute exact LOC/audit-day ratio without tool access to the Go source tree. Informal Systems conducted 6+ engagements over ~12 months. Finding density (1 critical, 4 medium across all phases) suggests meaningful depth. Qualitative evidence suggests adequate coverage, but the metric cannot be computed programmatically for a Go codebase.

Sources #

Methodology #

Determine whether the cyclomatic complexity or LOC-per-audit-day ratio exceeds the curator-declared credibility threshold for the audit to be meaningful.

See the full factor methodology and distribution across all protocols →