generate-encrypted-evals

What problem does it solve?

It converts product and verification specifications into concrete, testable evaluations while protecting plaintext contents by encrypting outputs and leaving no residual temporary files.

Core Features & Use Cases

• Spec-to-eval generation: Enumerates behavior, scenario, epic success/failure, and exit-gate derived checks into structured eval YAML.
• Encryption boundary in the skill: Encrypts the generated YAML using AES-256-CBC with PBKDF2, deletes plaintext, and verifies plaintext residue is absent.
• Manifest for traceability: Writes a manifest.json containing counts, paths, encryption metadata, generation timestamp, and SHA-256 hashes of input sources.

Quick Start

Generate encrypted evals for epic E1 phase 1 into an output directory by providing the product spec path, scenarios path, epics path, epic_id, phase_num, lld exit-gate text, the include list of eval sources, and an env var name that holds the encryption passphrase.