# Workflow and Interaction Between the Threat Oracle and the Machine Learning Model * The workflow begins with the threat oracle, which monitors the blockchain for new or modified contracts. Upon detecting a contract, the oracle extracts its details and passes them to the contract analysis module. * The contract analysis module processes the contract, extracting and preparing the opcodes for analysis. This processed data is then fed into the machine learning model. * The machine learning model analyzes the opcodes, assessing them for patterns or indicators that suggest malicious intent. The results of this analysis are then passed back to the threat oracle. * Based on the analysis results, the threat oracle makes informed decisions on whether the contract poses a security risk and takes appropriate actions, such as blocking the interaction with the destination contract. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://neurablock.gitbook.io/whitepaper/system-architecture/workflow-and-interaction-between-the-threat-oracle-and-the-machine-learning-model.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.