About CCPath
CCPath is Malaysia's sovereign, AI-first Robotic Process Automation and Software Quality Assurance engine. Engineered specifically to comply with national digital mandates from Jabatan Digital Negara (JDN) and the Malaysian Software Testing Board (MSTB).
MyTCoE / JDN Framework
ISO/IEC/IEEE 29119Malaysian Public Sector Software Testing Center of Excellence
Operated by Jabatan Digital Negara (JDN) and co-authored by the Malaysian Software Testing Board (MSTB).
Requirement Traceability
Every test script carries immutable linkage to Functional Requirement Specifications (e.g. FRS-ID, BRD-ID) for transparent IV&V auditing.
Dual-Language Ready
Native parser support for Bahasa Melayu and English test scripts (Langkah Pengujian, Keputusan Dijangka, Prasyarat).
Strict Security Isolation
Enforces synthetic test data (dummy state ICs, masked accounts) with automated password redaction and encrypted Auth Vault session storage.
IV&V Defect Severity
Classifies assertion failures under formal MyTCoE Severity Tiers (Critical, Major, Minor) with direct Jira defect ID linking.
National Compliance
Complete Sovereign Statutory Alignment
Akta 88 (Official Secrets Act)
All AI reasoning and test execution executes strictly on local on-premise GPU nodes with zero data egress across national borders.
PDPA 2024 (Act 709)
Guarantees zero unauthorized cross-border data transfers. Evidence screenshots and audit trails are AES-256 encrypted at rest.
Cyber Security Act 2024
NCII compliance with eBPF kernel event probes providing immutable kernel-level audit trails for NACSA inspection.
GPAISA JDN 2025
100% compliant with the 7 Public Sector AI Ethics Principles published by Jabatan Digital Negara on 27 February 2025.
AKSA MySeal 2.1 & PQC
Full compliance with CyberSecurity Malaysia AKSA MySeal 2.1 and NIST FIPS 203 using ML-KEM-768 hybrid key encapsulation, SHA3-256 digests, and AES-256-GCM.
Core Technology
Dual-Signal Verification Engine
Traditional automation relies on fragile DOM selectors. CCPath verifies test execution through two independent mathematical signals:
Structural Signal (DOM)
Deterministic Accessibility Tree (AXTree) validation verifying element presence, states, and text payloads without selector drift.
Semantic Signal (LLM Judge)
Vision-Language AI evaluator quotes visual screenshot evidence and generates natural language justification with confidence scoring.
Shadow Debugging Canvas
When signals disagree (INCONCLUSIVE), an interactive 30-minute VNC/CDP lease allows human operators to audit live state and record authoritative verdicts.
AI Autonomous Script Self-Healing
When web applications evolve, button selectors change, or workflow steps drift, CCPath's autonomous planner repairs the execution path live in the browser. Clicking AI Self-Heal Script synthesizes the observed recovery trajectory into a new versioned Markdown proposal in the Plan Library with complete change audit records.
Enterprise Operations
Project Workspaces & Team Governance
Logical application domain scoping, dedicated team member rosters, and plan visibility control ensuring strict zero-trust operational boundaries across government ministries and enterprise systems.
Domain-Scoped Workspaces
Pre-configured and custom workspaces grouping test plans, suites, and target HTTPS origins with Zero-Orphan deletion guardrails.
Admin Team Rosters
Granular per-project role assignments (LEAD, TESTER, AUDITOR, VIEWER) mapped to Casdoor Zero-Trust OIDC user identities.
Plan Visibility & 1-Click Publishing
Personal private drafts (PRIVATE) isolate experimental tests until promoted to team-shared status (SHARED) with 1-click publishing.
Education & Enablement
CCPath Interactive Learning Center
A built-in 20-module sovereign curriculum with role-tailored learning pathways, live WebAssembly exercises, and MyTCoE certification guidance.
Authoring Resources
Markdown (.md)Downloadable Test Script Templates
Download standard starter scripts, edit them locally, and import directly into the CCPath Operations Console.
MyTCoE Standard (Bahasa Melayu)
Full MyTCoE header metadata block, bilingual directives (Langkah Pengujian, Keputusan Dijangka), and explicit test parameters.
MyTCoE Public Sector (English)
Standard IV&V template with Artifact ID, RTM requirement mapping, and structured preconditions in English.
Standard Smoke Test
Lightweight autonomous browser loop verifying public URLs, HTTPS status, and text assertion presence.
RPA JSON Data Extraction
Extract tabular datasets into typed JSON schemas with intelligent auto-selection (Network API / Scoped AXTree).