Menu

Post image 1
Post image 2
1 / 2
0

We audited the same codebase twice. The score went down. The audit got better. Here is why.

DEV Community·Olebeng·about 1 month ago
#wyZAk3KJ
Reading 0:00
15s threshold

Score Down, Audit Better On 12 April I ran an Intent Audit on envelope-zero/backend, an open-source Go REST API for personal envelope budgeting. The score came back at 79 with three Critical findings: no authentication at the API layer, no encryption for financial data, and an unprotected Delete Everything endpoint. On 25 April I re-audited the same codebase with a corrected product description. The score dropped to 71.5. The three Critical findings became two High findings. The confirmation rate went from 57% to 67%. The Technical Readiness Score went from 70 to 76. Architecture maturity went from Level 2 to Level 3. The code did not change between the two audits. Here is what did, and why it produced a more accurate result. How an Intent Audit actually works An Intent Audit operates on two separate inputs simultaneously. The first is the stated intent: what you say the codebase is designed to do, derived from the product description you provide.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Read More