71 lines
1.1 KiB
Markdown
71 lines
1.1 KiB
Markdown
# System Audit - VoIdea
|
|
|
|
**Date:** 2026-05-10
|
|
**Status:** Active
|
|
|
|
---
|
|
|
|
## Overview
|
|
|
|
Audit system ensures project quality control through automatic agents and periodic checks.
|
|
|
|
---
|
|
|
|
## Audit Agents
|
|
|
|
### AuditAgent
|
|
|
|
**Responsibilities:**
|
|
- Rule compliance check (00-rules.md)
|
|
- Project progress monitoring
|
|
- Deviation detection
|
|
- Admin reports generation
|
|
|
|
**Triggers:**
|
|
- pre-commit hook
|
|
- Daily at 09:00 (cron)
|
|
- On admin request
|
|
|
|
### SecurityAgent
|
|
|
|
**Responsibilities:**
|
|
- Code vulnerability scanning
|
|
- Input validation
|
|
- Dependency checks
|
|
- 152-FZ compliance
|
|
- Suspicious activity logging
|
|
|
|
---
|
|
|
|
## Audit Types
|
|
|
|
### 1. Code Audit
|
|
- Ruff: 0 errors, < 10 warnings
|
|
- MyPy: strict mode, 0 errors
|
|
- Test coverage: > 80%
|
|
|
|
### 2. Security Audit
|
|
- Bandit: 0 high severity
|
|
- Safety: 0 critical vulnerabilities
|
|
- Secrets detection: 100%
|
|
|
|
### 3. Architecture Audit
|
|
- No cyclic dependencies
|
|
- ADR up to date
|
|
- All modules documented
|
|
|
|
### 4. Compliance Audit
|
|
- 152-FZ compliance
|
|
- Data retention policy
|
|
- RBAC verification
|
|
|
|
---
|
|
|
|
## Reports
|
|
|
|
Reports stored in: docs/insights/audit/
|
|
|
|
---
|
|
|
|
*Updated: 2026-05-10*
|