{% extends "base.html" %} {% block title %}Software Integrity Assessor — ICDEV{% endblock %} {% block content %} {# Context (from tools/integrity/blueprint.py :: integrity_index): assessments : list[dict] — id, source_type, source_ref, mode, project_id, session_id, status, verdict, risk_score, created_at, updated_at summary : {by_verdict: {allow/review/quarantine: n}, by_status: {...}, total} verdicts : VERDICTS (allow, review, quarantine) modes : ASSESS_MODES (provenance_aware, provenance_blind, auto) #}

Software Integrity & Provenance Assessor SIPA

Static-only assessment of ICDEV, contributed, and external code for malicious or unauthorized capability — embedded by a human or an AI agent — that is not part of the original requirement or claimed purpose. Quarantine-first; nothing executes the target.

{% set bv = summary.by_verdict if summary and summary.by_verdict else {} %}
{{ summary.total if summary else 0 }}
Assessments
{{ bv.get('allow', 0) }}
Allow
{{ bv.get('review', 0) }}
Review
{{ bv.get('quarantine', 0) }}
Quarantine

Assess a Source

A local path, git repo, UNC share, or remote URI. The source is staged in quarantine and scanned statically (SAST, secrets, deps, capability manifest, intent reconciliation) — it is never run.
Recent Assessments
{% if assessments %} {% for a in assessments %} {% set v = (a.verdict or 'none')|lower %} {% set st = (a.status or 'unknown')|lower %} {% set rs = a.risk_score if a.risk_score is not none else 0 %} {% set rpct = (rs * 100) if rs <= 1 else rs %} {% endfor %}
#SourceModeVerdictRiskStatusCreated
{{ a.id }} {{ a.source_type or '?' }} {{ a.source_ref or '—' }} {{ (a.mode or '—').replace('_', ' ') }} {{ (a.verdict or 'pending')|upper }}
{{ rpct|round(0)|int }}
{{ a.status or '—' }} {{ (a.created_at[:16] if a.created_at is string else a.created_at.strftime('%Y-%m-%d %H:%M')) if a.created_at else '—' }}
{% else %}
No assessments yet. Enter a source above and click Assess to run the first one.
{% endif %}
{% set iqe_canvas = "integrity" %} {% set iqe_api_route = "/integrity/api/iqe-query" %} {% set iqe_title = "IQE Query — Integrity Assessments & Findings" %} {% set iqe_examples = [ {"label": "Quarantined assessments", "query": "foreach a in integrity.assessments where a.verdict == \"quarantine\" select a.id, a.source_ref, a.risk_score"}, {"label": "Critical findings", "query": "foreach f in integrity.findings where f.severity == \"critical\" select f.source_scanner, f.finding_type, f.file_path"}, {"label": "Network-egress capabilities", "query": "foreach c in integrity.capabilities where c.capability_type == \"network_egress\" select c.file_path, c.function_name, c.risk_weight"} ] %} {% include "includes/iqe_query_widget.html" %} {% endblock %} {% block scripts %} {% endblock %}