From quorum
Static analysis agent that generates Functional Verification Matrix (FVM) by cross-referencing FE routes, API calls, BE endpoints, and access policies to detect mismatches and verify security controls.
npx claudepluginhub berrzebb/quorum --plugin quorumStatic analysis tool that cross-references FE routes, API calls, BE endpoints, and access policies to produce a Functional Verification Matrix (FVM). - Security audit — verify that access policies match actual endpoint behavior - New feature verification — generate expected auth matrix for new routes - FE↔BE gap detection — find API calls without matching endpoints (or vice versa) - Pre-deploym...
Fills Nyquist validation gaps by generating runnable behavioral tests for phase requirements, running them adversarially, debugging failures (max 3 iterations), verifying coverage, and escalating blockers.
Share bugs, ideas, or general feedback.
Static analysis tool that cross-references FE routes, API calls, BE endpoints, and access policies to produce a Functional Verification Matrix (FVM).
| Param | Required | Default | Description |
|---|---|---|---|
--path | Yes | — | Project root directory (must contain web/src/ and src/dashboard/) |
--format | No | full | full (all sections), mismatches (FE/BE gaps only), matrix (verification rows only) |
# Full FVM with summary, mismatches, and matrix
quorum tool fvm_generate --path /path/to/project
# Only FE↔BE mismatches
quorum tool fvm_generate --path /path/to/project --format mismatches
# Raw verification matrix only
quorum tool fvm_generate --path /path/to/project --format matrix
# JSON output with structured data
quorum tool fvm_generate --path /path/to/project --json
web/src/router-paths.ts — path constantsweb/src/pages/access-policy.ts — view/manage tiers per routeweb/src/router.tsx — which component handles each routeapi.get/post/put/patch/del() calls in web/src/src/dashboard/routes/*.ts| Tier | Roles Allowed |
|---|---|
public | All (including unauthenticated) |
authenticated | superadmin, owner, manager, member, viewer |
team_member | superadmin, owner, manager, member, viewer |
team_manager | superadmin, owner, manager |
team_owner | superadmin, owner |
superadmin | superadmin only |
GET requests use the view tier; mutations (POST/PUT/PATCH/DELETE) use the manage tier.
## FVM — Functional Verification Matrix
### Summary
- FE Routes: 25
- FE API Calls: 48
- BE Endpoints: 52
- FVM Rows: 762
- Mismatches: 4
### Mismatches
| Type | FE | BE | Files |
|------|----|----|-------|
### Verification Matrix
| Route | Page | Feature | API Endpoint | Method | Tier | Role | Expected |
|-------|------|---------|-------------|--------|------|------|----------|
| Type | Meaning |
|---|---|
| FE-only | FE calls an API that has no BE endpoint |
| BE-only | BE defines an endpoint that no FE code calls |