Prove it, don't flag it.

Submit a Solidity repo. Vigil ingests it, generates exploits, and runs them in an isolated fork. Only vulnerabilities whose exploit actually succeeded are reported.