CIV-ARCOS

Civilian Assurance-based Risk Computation and Orchestration System

"Military-grade assurance for civilian code"

A civilian version of military-grade software assurance following proven ARCOS methodologies. Perfect for open source projects, enterprise development teams, or as a SaaS offering.

Features

Evidence Collection Engine: Graph-based storage system similar to RACK for organizing evidence with data provenance tracking
Automated Test Evidence Generation: Static analysis, security scanning, test generation, and coverage analysis
- Static Analysis: Code complexity, maintainability index, and code smell detection
- Security Scanning: SAST vulnerability detection (SQL injection, XSS, hardcoded secrets, etc.)
- PowerShell Security Scanner: Comprehensive PowerShell script security analysis with 12+ vulnerability detection rules
- Test Generation: Automated test case suggestions with code-driven approach
- Coverage Analysis: Integration with coverage.py for tracking code and branch coverage
Digital Assurance Case Builder: CertGATE-style assurance cases with GSN notation
- Argument Templates: 5 built-in templates (code quality, test coverage, security, maintainability, comprehensive)
- Evidence Linking: Automatic connection of evidence to argument nodes
- GSN Visualization: Custom SVG, DOT, and summary formats for visual argument representation (100% in-house implementation)
- Pattern Instantiation: Auto-generate cases for 8 project types (web app, API, library, mobile app, CLI tool, microservice, desktop app, general)
GitHub Integration: Automated evidence collection from GitHub repositories
Enhanced Quality Badges: Dynamic SVG badge generation for 6 metrics:
- Test Coverage (Bronze: >60%, Silver: >80%, Gold: >95%)
- Code Quality (Excellent: >90%, Good: >75%, Fair: >60%)
- Security (vulnerability count)
- Documentation (API docs, README, inline comments)
- Performance (load testing, profiling results)
- Accessibility (WCAG A, AA, AAA compliance)
Web Dashboard: Interactive GUI for viewing quality metrics and assurance cases
- Home page with system overview
- Badge showcase with API examples
- Repository analyzer with GitHub integration
- PowerShell security analysis page with vulnerability detection
- Assurance case viewer with GSN visualization
Human-Centered Design: Role-based experience tailored for different users
- Persona Management: 4 user personas (Developer, QA, Auditor, Executive) with custom KPIs and dashboards
- Guided Onboarding: Interactive walkthroughs and tooltips for new users
- Accessibility Testing: Automated WCAG A/AA/AAA compliance checking
Explainable AI (XAI): Transparency and fairness in AI/ML predictions
- Model Transparency: Feature importance, decision paths, and narrative explanations
- Bias Detection: Fairness metrics and disparity analysis across groups
- Software Fallbacks: Rule-based alternatives for all AI features when ML is unavailable
Privacy & Data Governance: Comprehensive privacy controls and data protection
- Data Residency Controls: Region-specific data storage (US, EU, UK, CA, AU, Global)
- Evidence Redaction: Automated redaction of sensitive information (emails, API keys, credentials)
- Data Anonymization: Pseudonymization and generalization for privacy-preserving sharing
- Federated Evidence Sharing: Privacy-preserving evidence sharing across organizations
DevSecOps Expansion: Runtime security and threat modeling automation
- Runtime Monitoring: Integration with Falco and OpenTelemetry for security/performance
- Threat Modeling: Automated STRIDE threat analysis from architecture and code
- Security Event Collection: Real-time security event aggregation and analysis
- Performance Metrics: Distributed tracing and performance monitoring
- IriusRisk/Threat Dragon: Export threat models to industry-standard tools
Compliance & Certification Modules: Enterprise compliance automation suite
- Statistical Analysis: Advanced statistical analysis for quality metrics, trend detection, and forecasting
- ARMATURE Fabric: Accreditation and certification process automation (ISO 27001, SOC 2, FedRAMP, CMMC, etc.)
- Dynamics for Government: CRM and workflow automation for compliance stakeholders
- CIV-SCAP: Security Content Automation Protocol implementation
- CIV-STIG: Configuration compliance management
- CIV-ACAS: Unified vulnerability management
- Multiple Standards: Support for ISO 27001, SOC 2, FedRAMP, CMMC, HIPAA, PCI DSS, NIST 800-53, and more
Advanced Visualization & Reporting: Executive-friendly reports and risk visualization
- Executive Reports: Auto-generated PDF/HTML narrative reports with business language
- Risk Heatmaps: Interactive risk maps showing component-level risk visualization
- Trend Analysis: Visual analytics for quality and risk trends over time
- Risk Hotspot Detection: Automatic identification of high-risk components
Plugin SDK & Developer Tools: Extensibility framework for custom plugins
- Plugin Development Kit: Base classes and templates for 4 plugin types (collector, metric, compliance, visualization)
- Plugin Scaffolding: Automated plugin project generation with tests and documentation
- Development Environment: Docker-based sandbox for plugin development and testing
- Plugin Documentation: Comprehensive guides and API reference for plugin developers
REST API: Clean API endpoints for evidence collection, analysis, badge generation, assurance cases, and status queries
Blockchain-like Integrity: Immutable audit trails with cryptographic checksums for evidence authenticity
Custom Web Framework: Built from scratch without Django/FastAPI/Flask dependencies

Quick Start

Installation

# Install dependencies
pip install -r requirements.txt

Running the Server

# Start the API server
python -m civ_arcos.api

# Server will run on http://0.0.0.0:8000

Running Tests

# Run all tests
pytest

# Run with coverage
pytest --cov=civ_arcos --cov-report=html

Repository Structure

CIV-ARCOS/
├── civ_arcos/          # Main source code
│   ├── analysis/       # Static analysis, security scanning, test generation
│   ├── assurance/      # Assurance case components (CertGATE, CLARISSA, etc.)
│   ├── core/           # Core infrastructure (cache, tasks, config)
│   ├── evidence/       # Evidence collection system
│   ├── storage/        # Graph database
│   ├── web/            # Web framework, dashboard, badges
│   └── ...
├── emu-soft/           # Copies of emulated software with documentation
│   ├── details.md      # Comprehensive documentation of all emulations
│   └── *.py            # 16 emulated components (Redis, Celery, Neo4j, etc.)
├── build-docs/         # Implementation guides and step documentation
│   ├── build-guide.md  # Main build guide
│   └── STEP*.md        # Step-by-step completion guides
├── tests/              # Test suite
├── examples/           # Example code and demonstrations
└── README.md           # This file

Key Directories:

emu-soft/: Contains copies of all software created by emulating existing tools (Redis, Celery, FastAPI, Neo4j, ESLint, CodeQL, CertGATE, CLARISSA, etc.) with comprehensive documentation
build-docs/: All implementation guides, STEP completion documents, and architectural summaries

API Endpoints

Evidence Collection

POST /api/evidence/collect Collect evidence from a repository:

{
  "repo_url": "owner/repo",
  "commit_hash": "optional-commit-hash",
  "source": "github"
}

GET /api/evidence/list List all collected evidence with optional filters:

?type=evidence_type
?source=source_name

GET /api/evidence/{id} Get specific evidence by ID

Badge Generation

GET /api/badge/coverage/{owner}/{repo}?coverage=95.5 Generate coverage badge (Bronze: >60%, Silver: >80%, Gold: >95%)

GET /api/badge/quality/{owner}/{repo}?score=85 Generate quality badge based on quality score

GET /api/badge/security/{owner}/{repo}?vulnerabilities=0 Generate security badge showing vulnerability count

GET /api/badge/documentation/{owner}/{repo}?score=90 Generate documentation quality badge (API docs, README, inline comments)

GET /api/badge/performance/{owner}/{repo}?score=88 Generate performance badge (load testing, profiling results)

GET /api/badge/accessibility/{owner}/{repo}?level=AA&issues=0 Generate accessibility compliance badge (WCAG A, AA, AAA)

Web Dashboard

GET /dashboard Web dashboard home page with system overview

GET /dashboard/badges Badge showcase with all 6 badge types and API examples

GET /dashboard/analyze Repository analysis page with form to analyze GitHub repositories

GET /dashboard/assurance Assurance cases viewer showing all created cases

Automated Analysis

POST /api/analysis/static Run static code analysis:

{
  "source_path": "path/to/code"
}

POST /api/analysis/security Run security vulnerability scan:

{
  "source_path": "path/to/code"
}

POST /api/analysis/tests Generate test case suggestions:

{
  "source_path": "path/to/code",
  "use_ai": false
}

POST /api/analysis/comprehensive Run all analyses (static, security, tests):

{
  "source_path": "path/to/code",
  "run_coverage": false
}

POST /api/analysis/powershell Run PowerShell security analysis:

{
  "source_path": "path/to/script.ps1",
  "content": "PowerShell script content"
}

Detects 12+ security vulnerabilities including:

Insecure hash algorithms (MD5, SHA1)
Hardcoded credentials
Invoke-Expression risks
Disabled certificate validation
Unencrypted HTTP communication
SQL/Command injection vulnerabilities
Exposed secrets (API keys, tokens)
Execution policy bypass

Assurance Cases

POST /api/assurance/create Create an assurance case using templates:

{
  "project_name": "MyProject",
  "project_type": "api",
  "template": "comprehensive",
  "description": "Optional description"
}

GET /api/assurance/{case_id} Get assurance case details with full argument structure

GET /api/assurance/{case_id}/visualize Visualize assurance case:

?format=svg - SVG visualization (default)
?format=dot - Graphviz DOT format
?format=summary - JSON summary

POST /api/assurance/auto-generate Auto-generate case from collected evidence:

{
  "project_name": "MyProject",
  "project_type": "api",
  "evidence_ids": []
}

GET /api/assurance/templates List available argument templates

Integration APIs

POST /api/github/quality-check GitHub webhook endpoint for automated quality checks:

{
  "event_type": "push",
  "payload": {
    "repository": {"full_name": "owner/repo"},
    "ref": "refs/heads/main",
    "commits": [...]
  }
}

POST /api/slack/quality-alerts Send quality alerts to Slack:

{
  "project_name": "MyProject",
  "alert_type": "coverage_drop",
  "severity": "high",
  "message": "Coverage dropped below threshold",
  "details": {"previous": "85%", "current": "75%"}
}

POST /api/jira/quality-issues Create Jira issues for quality problems:

{
  "issue_type": "security",
  "data": {
    "title": "SQL Injection",
    "severity": "high",
    "description": "Vulnerability detected"
  }
}

GET /api/badge/{repo}/{branch} Get quality badge for specific repo/branch:

?type=coverage&coverage=95.5 - Coverage badge
?type=quality&score=85 - Quality badge
?type=security&vulnerabilities=0 - Security badge

System Status

GET /api/status Get system status and evidence count

Compliance & Certification

POST /api/statistics/analyze Comprehensive statistical analysis of dataset

POST /api/statistics/forecast Forecast future metric values using regression

POST /api/statistics/quality-score Quality score analysis with trend detection

POST /api/statistics/detect-anomalies Detect anomalies in data

GET /api/statistics/docs Statistical analysis documentation

POST /api/armature/initiate Initiate certification process (ISO 27001, SOC 2, FedRAMP, etc.)

POST /api/armature/validate Validate certification package

GET /api/armature/status/{package_id} Get certification status report

GET /api/armature/docs ARMATURE Fabric documentation

POST /api/dynamics/contact/create Create contact in CRM

POST /api/dynamics/workflow/initiate Initiate compliance workflow

GET /api/dynamics/workflow/status/{instance_id} Get workflow status

GET /api/dynamics/dashboard/{user_id} Get personalized stakeholder dashboard

GET /api/dynamics/docs Dynamics for Government documentation

Plugin Marketplace

POST /api/plugins/register Register a new plugin with security validation

GET /api/plugins/list List installed plugins:

?type=collector - Filter by plugin type

GET /api/plugins/{plugin_id} Get plugin details

POST /api/plugins/{plugin_id}/execute Execute a plugin method

POST /api/plugins/validate Validate plugin code security

GET /api/plugins/search Search plugins:

?q=query - Search query

Webhook Endpoints

POST /api/webhooks/github GitHub webhook handler

POST /api/webhooks/gitlab GitLab webhook handler

POST /api/webhooks/bitbucket Bitbucket webhook handler

GET /api/webhooks/endpoints Get available webhook endpoints

GraphQL

POST /api/graphql Execute GraphQL query:

{
  "query": "query { evidenceList(type: \"test\") }",
  "variables": {}
}

GET /api/graphql/schema Get GraphQL schema

Community Platform

POST /api/community/patterns/share Share a quality pattern

GET /api/community/patterns/list List quality patterns:

?category=testing - Filter by category

POST /api/community/practices/add Add a best practice

GET /api/community/practices/list List best practices

POST /api/community/threats/share Share threat intelligence

GET /api/community/threats/list List threat intelligence:

?severity=high - Filter by severity

POST /api/community/templates/industry/add Add an industry-specific template

GET /api/community/templates/industry/list List industry templates

POST /api/community/templates/compliance/add Add a compliance template

GET /api/community/templates/compliance/list List compliance templates

POST /api/community/benchmarks/add Add a benchmark dataset

GET /api/community/benchmarks/list List benchmark datasets

POST /api/community/benchmarks/compare Compare project metrics to benchmark

GET /api/ecosystem/documentation Get comprehensive API ecosystem documentation

Advanced Visualization & Reporting

POST /api/reports/executive/generate Generate executive narrative report:

{
  "project_name": "MyProject",
  "project_metrics": {
    "coverage": 85.0,
    "code_quality": 82.0,
    "vulnerability_count": 2
  },
  "trend_analysis": {...},
  "risk_predictions": [...]
}

POST /api/reports/executive/html Generate executive report as HTML (same request body as above)

POST /api/reports/executive/pdf Generate executive report PDF data (same request body as above)

POST /api/visualization/risk-map/generate Generate risk map with component analysis:

{
  "project_name": "MyProject",
  "evidence_data": {
    "complexity_score": 15,
    "vulnerability_count": 2,
    "coverage": 85
  },
  "component_metrics": [...]
}

POST /api/visualization/risk-map/html Generate interactive risk map as HTML

POST /api/visualization/risk-map/svg Generate risk heatmap as SVG

POST /api/visualization/risk-map/trend Generate risk trend analysis:

{
  "project_name": "MyProject",
  "historical_data": [
    {"generated_at": "2024-01-01", "overall_risk_score": 50}
  ]
}

Plugin SDK & Developer Tools

POST /api/plugin-sdk/scaffold Scaffold a new plugin project:

{
  "output_dir": "/tmp/plugins",
  "plugin_type": "collector",
  "name": "My Collector",
  "plugin_id": "my_collector",
  "author": "Developer Name",
  "description": "Plugin description"
}

POST /api/plugin-sdk/template/generate Generate plugin code from template (same request body as scaffold)

GET /api/plugin-sdk/guide Get plugin development guide (markdown format)

GET /api/plugin-sdk/types Get available plugin types:

collector - Evidence collectors
metric - Custom metrics
compliance - Compliance checks
visualization - Custom visualizations

Human-Centered Design & XAI Endpoints

GET /api/personas/list List all available persona roles (Developer, QA, Auditor, Executive):

{
  "success": true,
  "personas": {
    "developer": {...},
    "qa": {...},
    "auditor": {...},
    "executive": {...}
  }
}

GET /api/personas/{role} Get detailed configuration for a specific persona:

role: developer, qa, auditor, or executive

GET /api/personas/{role}/kpis Get primary KPIs for a specific persona role

GET /api/onboarding/flows List all onboarding flows:

?role=developer - Filter by user role (optional)

GET /api/onboarding/flows/{flow_id} Get detailed onboarding flow with steps

GET /api/onboarding/progress/{user_id} Get user's onboarding progress:

?flow_id=system_overview - Get progress for specific flow
?role=developer - Get next required flow for role

POST /api/onboarding/progress/{user_id}/step Mark an onboarding step as complete:

{
  "flow_id": "system_overview",
  "step_id": "welcome"
}

POST /api/onboarding/progress/{user_id}/flow Mark an entire onboarding flow as complete:

{
  "flow_id": "system_overview"
}

POST /api/accessibility/test Test HTML content for WCAG accessibility compliance:

{
  "html_content": "<html>...</html>",
  "wcag_level": "AA"
}

GET /api/accessibility/criteria Get WCAG criteria information and requirements

POST /api/xai/explain Generate explanation for an AI/ML prediction:

{
  "prediction": 85.0,
  "features": {
    "coverage": 90.0,
    "complexity": 5.0,
    "vulnerabilities": 1
  },
  "model_type": "quality_predictor",
  "use_ai": true
}

POST /api/xai/detect-bias Detect bias in predictions across different groups:

{
  "predictions": [90, 85, 75, 70],
  "features_list": [
    {"team": "A"},
    {"team": "A"},
    {"team": "B"},
    {"team": "B"}
  ],
  "protected_attributes": ["team"],
  "use_ai": true
}

POST /api/xai/transparency-report Generate comprehensive transparency report:

{
  "prediction": 80.0,
  "features": {"coverage": 85.0},
  "include_bias": true,
  "predictions_list": [...],
  "features_list": [...],
  "protected_attributes": ["team"]
}

Privacy & Data Governance

POST /api/tenants/create Create a tenant with data residency controls:

{
  "tenant_id": "org_eu",
  "config": {
    "data_residency": "eu",
    "weights": {"coverage": 0.3, "security": 0.3},
    "standards": ["GDPR", "ISO27001"]
  }
}

PUT /api/tenants/{tenant_id}/data-residency Update tenant data residency:

{
  "region": "eu"
}

GET /api/tenants/{tenant_id}/data-residency Get tenant data residency information

GET /api/privacy/regions List available data residency regions (US, EU, UK, CA, AU, Global)

POST /api/privacy/redact Redact sensitive information from evidence:

{
  "evidence": {
    "data": {
      "email": "[email protected]",
      "api_key": "secret_key_123"
    }
  },
  "redaction_level": "standard"
}

POST /api/privacy/anonymize Anonymize evidence for privacy-preserving sharing:

{
  "evidence": {
    "author": "john_doe",
    "timestamp": "2024-01-15T10:30:00Z"
  },
  "level": "standard"
}

Runtime Monitoring & DevSecOps

POST /api/monitoring/events/collect Collect runtime security events:

{
  "source": "falco",
  "severity": "high",
  "since": "2024-01-15T00:00:00Z"
}

POST /api/monitoring/metrics/collect Collect performance metrics:

{
  "source": "opentelemetry",
  "metric_type": "latency"
}

POST /api/monitoring/evidence/generate Generate evidence from monitoring data:

{
  "time_window": "last_24h"
}

POST /api/threats/model/create Create a threat model from architecture:

{
  "name": "MySystem",
  "architecture": {
    "components": [
      {
        "name": "WebApp",
        "type": "web_application",
        "trust_level": 3
      }
    ],
    "data_flows": [
      {
        "source": "WebApp",
        "destination": "Database",
        "encrypted": false
      }
    ]
  }
}

POST /api/threats/model/from-code Generate threat model from code analysis:

{
  "project": "MyProject",
  "code_analysis": {
    "apis": [...],
    "vulnerabilities": [...]
  }
}

GET /api/threats/model/{model_id} Get threat model details

GET /api/threats/model/{model_id}/summary Get threat model summary with risk scores

POST /api/threats/model/{model_id}/export Export threat model:

{
  "format": "iriusrisk"
}

Architecture

CIV-ARCOS is built with custom implementations of common frameworks:

Web Framework: Custom HTTP server and routing system (emulating FastAPI/Flask)
Graph Database: Custom graph storage for evidence relationships (emulating Neo4j)
Cache Layer: Redis emulator for caching and real-time updates
Task Processor: Celery emulator for background evidence processing
Evidence Collection: Extensible adapter system for different data sources
- GitHub (code metrics, commits, PR reviews)
- CI/CD systems (test results, coverage, performance)
- Security tools (vulnerabilities, dependency analysis)
Integrations: Slack, Jira, GitHub webhooks
Badge System: SVG badge generation similar to shields.io

Project Structure

civ_arcos/
├── core/           # Core configuration and utilities
│   ├── config.py          # Configuration management
│   ├── cache.py           # Redis emulator
│   └── tasks.py           # Celery emulator
├── evidence/       # Evidence collection and storage engine
├── storage/        # Graph database implementation
├── analysis/       # Automated test evidence generation
│   ├── static_analyzer.py      # Static code analysis
│   ├── security_scanner.py     # Security vulnerability scanning
│   ├── test_generator.py       # Automated test generation
│   ├── coverage_analyzer.py    # Code coverage analysis
│   └── collectors.py           # Evidence collectors
├── assurance/      # Digital assurance case builder
│   ├── gsn.py                  # Goal Structuring Notation types
│   ├── case.py                 # AssuranceCase and builder
│   ├── templates.py            # Argument templates
│   ├── patterns.py             # Pattern instantiation
│   └── visualizer.py           # GSN visualization
├── web/            # Web framework and API
│   ├── framework.py            # Custom HTTP server
│   ├── badges.py               # Badge generator
│   └── dashboard.py            # Dashboard generator
├── adapters/       # Integration adapters
│   ├── github_adapter.py       # GitHub integration
│   ├── ci_adapter.py           # CI/CD integrations
│   ├── security_adapter.py     # Security tool integrations
│   └── integrations.py         # Slack, Jira, webhooks
└── utils/          # Utility functions

tests/
├── unit/           # Unit tests (268 tests)
└── integration/    # Integration tests (57 tests)

Configuration

Configuration can be set via:

JSON config file
Environment variables:
- ARCOS_DEBUG: Enable debug mode
- ARCOS_HOST: Server host (default: 0.0.0.0)
- ARCOS_PORT: Server port (default: 8000)
- ARCOS_STORAGE_PATH: Evidence storage path
- GITHUB_TOKEN: GitHub API token for authentication
- SLACK_WEBHOOK_URL: Slack webhook URL for notifications
- JIRA_URL: Jira server URL
- JIRA_PROJECT: Jira project key
- JIRA_TOKEN: Jira authentication token

Development

Code Quality

# Format code
black civ_arcos/ tests/

# Type checking
mypy civ_arcos/

# Linting
flake8 civ_arcos/ tests/

Roadmap

Step 1: Evidence Collection Engine ✅

Step 2: Automated Test Evidence Generation ✅

Static analysis module (complexity, maintainability, code smells)
Security scanning (SAST with vulnerability detection)
Test case generation (code-driven with AI support option)
Coverage analysis framework (with coverage.py integration)
Evidence collectors for all analysis types
REST API endpoints for analysis
Comprehensive test suite (85 tests)

Step 3: Digital Assurance Case Builder ✅

Argument templates (5 built-in templates)
Evidence linking (automatic connection of evidence to argument nodes)
GSN (Goal Structuring Notation) implementation
Pattern instantiation (8 project types supported)
GSN visualization (SVG, DOT, summary formats)
REST API endpoints for assurance cases
Comprehensive test suite (71 tests: 58 unit + 13 integration)

Step 4: Quality Badge System and GUI/Web App Frontend ✅

Step 5: Backend Architecture Enhancement ✅

Future Enhancements (Optional) - COMPLETED IN STEP 5.5

WebSocket connections for live UI quality score updates (foundation ready via cache pub/sub)
Enhanced LLM integration for advanced test generation
Additional CI/CD platform adapters (GitLab CI, CircleCI, Travis CI)
Additional security tool integrations (Veracode, Checkmarx)
Notification channels (Discord, Microsoft Teams, Email)
Detailed reporting system for test score improvement

Name		Name	Last commit message	Last commit date
Latest commit History 2 Commits
build-docs		build-docs
civ_arcos		civ_arcos
docs		docs
emu-soft		emu-soft
examples		examples
tests		tests
.gitattributes		.gitattributes
.gitignore		.gitignore
COMPLIANCE_MODULES_IMPLEMENTATION.md		COMPLIANCE_MODULES_IMPLEMENTATION.md
CONTRIBUTING.md		CONTRIBUTING.md
Dockerfile		Dockerfile
Dockerfile.dev		Dockerfile.dev
EXTERNAL_SCRIPTS_REPLACEMENT_VERIFICATION.md		EXTERNAL_SCRIPTS_REPLACEMENT_VERIFICATION.md
IMPLEMENTATION_SUMMARY.md		IMPLEMENTATION_SUMMARY.md
LICENSE		LICENSE
MANIFEST.in		MANIFEST.in
NEW_MODULES_IMPLEMENTATION.md		NEW_MODULES_IMPLEMENTATION.md
NEW_MODULES_PAGES_SUMMARY.md		NEW_MODULES_PAGES_SUMMARY.md
QUICKSTART.md		QUICKSTART.md
QUICKSTART_NEW_MODULES.md		QUICKSTART_NEW_MODULES.md
README.md		README.md
REPLACEMENT_SUMMARY.md		REPLACEMENT_SUMMARY.md
SCRIPT_COMPLETION_REPORT.md		SCRIPT_COMPLETION_REPORT.md
TASK_COMPLETE.md		TASK_COMPLETE.md
TASK_COMPLETION_REPORT.txt		TASK_COMPLETION_REPORT.txt
TASK_COMPLETION_SUMMARY.md		TASK_COMPLETION_SUMMARY.md
docker-compose.dev.yml		docker-compose.dev.yml
docker-compose.yml		docker-compose.yml
enhancements.md		enhancements.md
improved_chart.svg		improved_chart.svg
incorporate.md		incorporate.md
pytest.ini		pytest.ini
python_dev_opportunities.md		python_dev_opportunities.md
requirements-dev.txt		requirements-dev.txt
requirements.txt		requirements.txt
script.md		script.md
setup.py		setup.py
test_drakon_chart.py		test_drakon_chart.py
test_drakon_output.svg		test_drakon_output.svg
test_gsn.json		test_gsn.json
test_gsn_data.json		test_gsn_data.json
test_mymodule.py		test_mymodule.py
test_output.svg		test_output.svg
test_request.json		test_request.json
verify_script_implementations.py		verify_script_implementations.py

Folders and files

Latest commit

History

Repository files navigation

CIV-ARCOS

Features

Quick Start

Installation

Running the Server

Running Tests

Repository Structure

API Endpoints

Evidence Collection

Badge Generation

Web Dashboard

Automated Analysis

Assurance Cases

Integration APIs

System Status

Compliance & Certification

Plugin Marketplace

Webhook Endpoints

GraphQL

Community Platform

Advanced Visualization & Reporting

Plugin SDK & Developer Tools

Human-Centered Design & XAI Endpoints

Privacy & Data Governance

Runtime Monitoring & DevSecOps

Architecture

Project Structure

Configuration

Development

Code Quality

Roadmap

Step 1: Evidence Collection Engine ✅

Step 2: Automated Test Evidence Generation ✅

Step 3: Digital Assurance Case Builder ✅

Step 4: Quality Badge System and GUI/Web App Frontend ✅

Step 5: Backend Architecture Enhancement ✅

Future Enhancements (Optional) - COMPLETED IN STEP 5.5

Step 5.5: Advanced Features ✅

Step 9: Market & Ecosystem ✅

Step 10: Future-Proofing & Innovation ✅

Step 11: Privacy, Data Governance & DevSecOps Expansion ✅

License

Contributing

References

About

Resources

License

Contributing

Uh oh!

Stars

Watchers

Forks

Releases

Packages 0

Uh oh!

Contributors

Uh oh!

Languages

Packages