moai-adk 0.25.4__py3-none-any.whl → 0.32.8__py3-none-any.whl

moai_adk/templates/.claude/skills/moai-foundation-quality/modules/trust5-validation.md

@@ -0,0 +1,169 @@
+# TRUST 5 Validation Framework
+
+Comprehensive TRUST 5 quality framework validation for enterprise code quality assurance.
+
+## Overview
+
+The TRUST 5 framework validates five core quality principles:
+- Testable - Test coverage and quality
+- Readable - Code clarity and maintainability
+- Unified - Consistent patterns and standards
+- Secured - Security compliance (OWASP)
+- Trackable - Version control and audit trails
+
+## TRUST 5 Validator Implementation
+
+```python
+class TRUST5Validator:
+ """Comprehensive TRUST 5 quality framework validation"""
+
+ VALIDATORS = {
+ "testable": TestableValidator(),
+ "readable": ReadableValidator(),
+ "unified": UnifiedValidator(),
+ "secured": SecuredValidator(),
+ "trackable": TrackableValidator()
+ }
+
+ async def validate(self, codebase: str, thresholds: Dict[str, float]) -> TRUST5Result:
+ """Execute complete TRUST 5 validation"""
+
+ results = {}
+
+ for principle, validator in self.VALIDATORS.items():
+ result = await validator.validate(
+ codebase=codebase,
+ threshold=thresholds.get(principle, 0.8)
+ )
+ results[principle] = result
+
+ # Calculate overall TRUST 5 score
+ overall_score = sum(r.score for r in results.values()) / len(results)
+
+ return TRUST5Result(
+ principles=results,
+ overall_score=overall_score,
+ passed=overall_score >= thresholds.get("overall", 0.85),
+ recommendations=self._generate_trust5_recommendations(results)
+ )
+
+class TestableValidator:
+ """Test-first principle validation"""
+
+ async def validate(self, codebase: str, threshold: float) -> ValidationResult:
+ """Validate test coverage and quality"""
+
+ # Check test coverage
+ coverage_result = await self._analyze_test_coverage(codebase)
+
+ # Validate test quality
+ test_quality = await self._analyze_test_quality(codebase)
+
+ # Check test structure
+ test_structure = await self._validate_test_structure(codebase)
+
+ score = (coverage_result.score * 0.5 +
+ test_quality.score * 0.3 +
+ test_structure.score * 0.2)
+
+ return ValidationResult(
+ score=score,
+ passed=score >= threshold,
+ details={
+ "coverage": coverage_result,
+ "quality": test_quality,
+ "structure": test_structure
+ },
+ recommendations=self._generate_testing_recommendations(
+ coverage_result, test_quality, test_structure
+ )
+ )
+
+class SecuredValidator:
+ """Security principle validation with OWASP compliance"""
+
+ async def validate(self, codebase: str, threshold: float) -> ValidationResult:
+ """Validate security compliance and vulnerabilities"""
+
+ # OWASP Top 10 validation
+ owasp_result = await self._validate_owasp_compliance(codebase)
+
+ # Security best practices
+ security_practices = await self._validate_security_practices(codebase)
+
+ # Dependency vulnerability scan
+ dependency_scan = await self._scan_dependency_vulnerabilities(codebase)
+
+ # Code security patterns
+ code_security = await self._analyze_code_security(codebase)
+
+ score = (owasp_result.score * 0.4 +
+ security_practices.score * 0.3 +
+ dependency_scan.score * 0.2 +
+ code_security.score * 0.1)
+
+ return ValidationResult(
+ score=score,
+ passed=score >= threshold,
+ details={
+ "owasp": owasp_result,
+ "practices": security_practices,
+ "dependencies": dependency_scan,
+ "code_patterns": code_security
+ },
+ security_level=self._calculate_security_level(score),
+ recommendations=self._generate_security_recommendations(
+ owasp_result, security_practices, dependency_scan, code_security
+ )
+ )
+```
+
+## Configuration
+
+```yaml
+trust5_framework:
+ enabled: true
+ thresholds:
+ overall: 0.85
+ testable: 0.90
+ readable: 0.80
+ unified: 0.85
+ secured: 0.90
+ trackable: 0.80
+```
+
+## Quality Gate Pipeline
+
+```python
+async def quality_gate_pipeline():
+ """Integrate quality validation into CI/CD pipeline"""
+
+ # Initialize quality orchestrator
+ quality_orchestrator = QualityOrchestrator.from_config("quality-config.yaml")
+
+ # Run comprehensive quality analysis
+ quality_result = await quality_orchestrator.analyze_codebase(
+ path="src/",
+ languages=["python", "typescript"],
+ quality_threshold=0.85
+ )
+
+ # Quality gate validation
+ if not quality_result.trust5_validation.passed:
+ print(" Quality gate failed!")
+ print(f"Overall score: {quality_result.overall_score:.2f}")
+
+ # Print failed principles
+ for principle, result in quality_result.trust5_validation.principles.items():
+ if not result.passed:
+ print(f" {principle}: {result.score:.2f} (threshold: 0.80)")
+
+ # Exit with error code
+ sys.exit(1)
+
+ print(" Quality gate passed!")
+```
+
+## Integration Examples
+
+See [Integration Patterns](integration-patterns.md) for CI/CD and GitHub Actions integration examples.