Install
$ agentstack add skill-mblauberg-provenant-evaluate ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Evaluate
Turn judgement into a frozen, repeatable assurance result. Deterministic tests still run; this skill covers behaviour whose quality cannot be proven by an exit code alone.
Contract
Freeze the canonical evaluation plan before seeing results:
- decision the evaluation informs and unacceptable failure modes;
- hash-bound dataset/corpus, provenance, consent or licence, data policy and
holdout boundary;
- candidate and applicable comparator manifests, paired sampling, seeds,
repetitions, timeouts, retries and exclusions;
- metric ranges, aggregation, thresholds and per-metric regression margins;
- deterministic preflight, rubric, blinded independent graders and
disagreement handling;
- safety, bias, privacy and adversarial cases proportionate to risk;
- enclosing delivery run when this evidence supports a non-trivial outcome.
Use [EVALUATION.template.json](templates/EVALUATION.template.json) and the [receipt contract](references/receipt.md). Keep raw examples outside the hot receipt; link safe relative artifacts and SHA-256 digests.
Run
- Validate fixtures, hashes, schemas and leakage controls before any judgement
attempt. Deterministic failure stops or explicitly skips the frozen schedule.
- Run each planned arm/family/repetition. Retain every attempt, retry and case
row with actual adapter/provider/model/effort lineage and usage disposition.
- Account for passes, failures, omissions, skips, exclusions, timeouts, invalid
output and tool/provider errors. A retry appends; it never erases its parent.
- Aggregate from retained rows. Report raw numerators/denominators,
distributions and failure clusters, rather than averages alone.
- Blind independent graders to treatment identity. Record criterion evidence;
send disagreements to a fresh adjudicator rather than majority vote.
- Compare with frozen thresholds and applicable arms. A post-hoc change creates
a fresh run; it does not rewrite the completed evidence.
- Preserve bounded failures and route product defects to
implement, unclear
requirements to scope, and operational regressions to diagnose.
Validate the receipt with:
${AGENTS_HOME:-$HOME/.agents}/skills/evaluate/scripts/validate_evaluation.py \
EVALUATION.json --verify-hashes --require-pass \
--expected-evaluation-id "$EVALUATION_ID" \
--expected-plan-digest "$FROZEN_PLAN_DIGEST" \
--expected-delivery-run-id "$DELIVERY_RUN_ID"
pass is a machine assurance result for the named distribution, not general safety or user acceptance. Attach it to the canonical delivery receipt; only that lifecycle's user gate can mark the outcome accepted. Unsupported receipt shapes fail closed; rerun them from a freshly frozen plan instead of migrating or guessing missing evidence.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: mblauberg
- Source: mblauberg/provenant
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.