Setting the file. One moment.
Subchapter 35.7
references/self-reflection-quality-gate.mdMarkdown2 KBView on GitHub
After completing analysis, internally score the output across domain-relevant categories (1–10 scale).
| Category | Question | Threshold |
|---|---|---|
| Completeness | Were all required phases/categories evaluated with evidence? | ≥ 8 |
| Accuracy | Are findings backed by concrete references (code, architecture, CVEs), not speculation? | ≥ 8 |
| Actionability | Does every Critical/High finding have a specific, implementable fix or mitigation? | ≥ 8 |
| Consistency | Are severity ratings, mappings, and verdicts internally consistent? | ≥ 8 |
| Coverage | Were all entry points, trust boundaries, modules, or manifests identified and analyzed? | ≥ 8 |
| Deduplication | Are cross-tool duplicates properly merged with corroboration notes? | ≥ 8 |
| Completeness | Were all issue types (Bugs, Vulnerabilities, Hotspots, Smells, Duplication) evaluated? | ≥ 8 |
| Coverage | Were all entry points taint-traced and all dependency manifests audited? | ≥ 8 |
| Completeness | Were all six STRIDE categories evaluated for every trust boundary and data flow? | ≥ 8 |
| Completeness | Were all seven STRIDE-LM categories evaluated for every asset and trust boundary? | ≥ 8 | | Coverage | Were all lateral movement paths, trust boundaries, and post-exploitation chains assessed? | ≥ 8 |
| Coverage | Were all entry points, trust boundaries, and data flows traced from source to sink? | ≥ 8 |