feat(certs): Add framework guidance links to certification controls#382
Closed
artemisclaw82 wants to merge 3 commits intosecurity-alliance:developfrom
Closed
feat(certs): Add framework guidance links to certification controls#382artemisclaw82 wants to merge 3 commits intosecurity-alliance:developfrom
artemisclaw82 wants to merge 3 commits intosecurity-alliance:developfrom
Conversation
|
@artemisclaw82 is attempting to deploy a commit to the Security Alliance Team on Vercel. A member of the Team first needs to authorize it. |
Collaborator
|
Hey @DicksonWu654, this PR targets the main branch. All PRs must target the develop one. |
Collaborator
|
Fixed sorry!
…On Mon, Feb 16, 2026 at 7:41 AM Sara Russo ***@***.***> wrote:
*scode2277* left a comment (security-alliance/frameworks#382)
<#382 (comment)>
Hey @DicksonWu654 <https://github.com/DicksonWu654>, this PR targets the
main branch. All PRs must target the develop one.
Can you please fix it?
—
Reply to this email directly, view it on GitHub
<#382 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AIAWHKKSZRZ2UWUMBP64FRL4MHJLBAVCNFSM6AAAAACVHFXAS6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTSMBYHA2TINBXGA>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
Author
|
Disclosure: This content was written by Artemis, an AI assistant operated by @DicksonWu654. It has not yet been reviewed by a human. Dickson will review and revise before marking as ready for review. |
- Extract 111 controls across 6 certs + 275 framework pages into structured JSON - Keyword-based matching (TF-IDF-like scoring) maps controls to relevant pages - Forward links: ControlCard shows '📖 Related Framework Guidance' per control - Reverse links: CertReferences component for framework pages to show cert controls - Gap analysis report: 58% full coverage, 33% partial, 9% uncovered (10 controls) - Coverage levels: 'full' (≥80% baseline match) and 'partial' (some coverage) - Build-tested: bundles + prerender clean Scripts (regeneratable): scripts/extract-cert-framework-data.mjs — parse certs + pages to JSON scripts/match-controls-to-pages.mjs — keyword matching engine scripts/build-final-mapping.mjs — produce TS data file + gap report
Pipeline: keyword matching → LLM evaluation → LLM QA verification QA results: 82% confirmed, 18 downgrades, 1 upgrade, 1 false-negative fixed Post-QA coverage (strict): - 22 controls (20%) with full framework coverage - 69 controls (62%) with partial coverage - 20 controls (18%) with no coverage - 247 gap baselines identified for future content work - 42 framework pages linked across 111 controls Build-tested clean.
ddf5aa6 to
9d045a7
Compare
Sidebar Configuration ReminderDocumentation files update: New in this push:
Please ensure that:
See Contributing Guide – Sidebar & Navigation for more details. This is an automated reminder. If this PR doesn't need sidebar changes, you can ignore this message. |
Collaborator
|
Clsoing this in favor of: #401 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds "📖 Related Framework Guidance" links to certification control cards, connecting each control to framework pages that substantively address its baselines.
What it does
Each certification control card now shows links to relevant framework pages where users can find actionable guidance for meeting that control's requirements. Only links where the framework content actually meets the baseline standards are included — not just keyword matches.
Coverage (strict, QA-verified)
42 framework pages linked across 111 controls.
Quality methodology
Three-stage pipeline to avoid false positives:
Gap analysis
docs/gap-analysis.mdidentifies 247 specific baseline gaps where framework content doesn't yet cover cert requirements — useful for prioritizing future content.Files
Components:
components/cert/ControlCard.tsx— enhanced with framework guidance linkscomponents/cert/cert-framework-map.ts— generated control → framework page indexcomponents/cert/control.css— styles for guidance linksScripts (reproducible pipeline):
scripts/extract-cert-framework-data.mjsscripts/match-controls-to-pages.mjsscripts/generate-eval-briefs.mjsscripts/build-verified-mapping.mjsData:
scripts/data/eval-results/*.json— per-cert verified evaluationsscripts/data/qa-results/*.json— QA verification resultsdocs/gap-analysis.md— coverage report with specific gapsBuild
Clean build (
pnpm run docs:build, ~131s).