verification_triad - lgcorzo/rust_CACD_autonomous_factory GitHub Wiki
iso_doc_type: "Description" iso_viewpoint: "SecurityView" type: "security" title: "Verification Triad โ Dark Gravity Factory" description: "ISO 42010 SecurityView / ISO 15289 Description documentation for Verification Triad โ Dark Gravity Factory." tags: ['iso42010', 'okf', 'security_view', 'zero_trust', 'governance'] timestamp: "2026-10-01T14:00:00Z" generated: "agent:okf-professional-documenter" verified: "true" last_verified_commit: "fbdc5848"
Purpose: Three-gate verification pipeline ensuring code quality before delivery.
flowchart LR
CODE["Code Changes"] --> LOGICAL["Gate 1: Logical<br/>Unit + Integration Tests"]
LOGICAL --> ARCH["Gate 2: Architectural<br/>Clippy + Dependency Audit"]
ARCH --> SEC["Gate 3: Security<br/>SAST + NHI Verification"]
SEC --> DELIVER["โ
Ready for Delivery"]
style LOGICAL fill:#4CAF50,stroke:#2E7D32,color:#fff
style ARCH fill:#2196F3,stroke:#1565C0,color:#fff
style SEC fill:#f44336,stroke:#c62828,color:#fff
style DELIVER fill:#9C27B0,stroke:#6A1B9A,color:#fff
| Check | Tool | Threshold |
|---|---|---|
| Unit tests | cargo test |
100% pass |
| Integration tests | cargo test --test |
100% pass |
| Coverage | cargo llvm-cov |
> 80% |
| Check | Tool | Threshold |
|---|---|---|
| Linting | cargo clippy |
0 warnings |
| Formatting | cargo fmt --check |
0 diffs |
| Dependency audit | cargo audit |
0 critical |
| Check | Tool | Threshold |
|---|---|---|
| SAST score | SastScanResult::inspect_diff |
>= 8.0 / 10.0 |
| Critical vulnerabilities | SAST scanner | 0 critical |
| NHI credential | Ed25519 verification | Valid signature |
| Sandbox constraints | validate_sandbox_constraints |
Within bounds |
Related: Security Architecture ยท Test Plan