voidea/docs/blocks/AUDIT.md

System Audit - VoIdea

Date: 2026-05-10 Status: Active

---

Overview

Audit system ensures project quality control through automatic agents and periodic checks.

---

Audit Agents

AuditAgent

Responsibilities:

• Rule compliance check (00-rules.md)
• Project progress monitoring
• Deviation detection
• Admin reports generation

Triggers:

• pre-commit hook
• Daily at 09:00 (cron)
• On admin request

SecurityAgent

Responsibilities:

• Code vulnerability scanning
• Input validation
• Dependency checks
• 152-FZ compliance
• Suspicious activity logging

---

Audit Types

1. Code Audit

• Ruff: 0 errors, < 10 warnings
• MyPy: strict mode, 0 errors
• Test coverage: > 80%

2. Security Audit

• Bandit: 0 high severity
• Safety: 0 critical vulnerabilities
• Secrets detection: 100%

3. Architecture Audit

• No cyclic dependencies
• ADR up to date
• All modules documented

4. Compliance Audit

• 152-FZ compliance
• Data retention policy
• RBAC verification

---

Reports

Reports stored in: docs/insights/audit/

---

Updated: 2026-05-10