spec-blind-validate

Author and run black-box tests against the public API surface.

1|Updated Mar 15, 2026
One-click install
npx skills add https://github.com/paulingham/.claude --skill spec-blind-validate
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spec-blind-validate
Source: https://github.com/paulingham/.claude/tree/main/skills/spec-blind-validate
Command: npx skills add https://github.com/paulingham/.claude --skill spec-blind-validate

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Adds a dedicated Final Gate teammate that authors tests against the public API surface from the AC plan ONLY — never from implementation source — ensuring true black-box validation and preventing data leaks from internal code.

Core Features & Use Cases

  • Enforces test authoring strictly against public-surface artifacts with three PreToolUse guards (read/write/bash) to maintain surface isolation.
  • Executes in parallel with other Final Gate teammates to accelerate verification while preserving isolation from implementation details.
  • Emits precise verdicts (SPEC_BLIND_VALIDATED, SPEC_BLIND_FAILED, SPEC_BLIND_BLOCKED) with targeted failure context to guide fixes without exposing internal code.

Quick Start

Author public-surface tests and invoke the spec-blind validator as a Final Gate teammate; it will run alongside other gates and apply the public-surface constraints automatically.

Frequently Asked Questions about spec-blind-validate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate tests against a public API surface only?

To validate tests against a public API surface only, the skill authors black-box tests from the acceptance criteria plan and runs them as a Final Gate teammate. Three PreToolUse guards enforce surface isolation during test execution.

What is black-box testing for public API surface validation?

Black-box testing for public API surface validation is a method that authors tests strictly against public artifacts without accessing implementation source code. This prevents data leaks from internal code and ensures tests validate only external behavior.

How do I run public API tests in parallel with other harness checks?

You run public API tests in parallel with other harness checks by invoking the validator as a Final Gate teammate. It executes alongside other gates to accelerate verification while preserving isolation from implementation details automatically.

Does black-box testing work with Final Gate workflows?

Yes, black-box testing works with Final Gate workflows by applying pre-checks that guard read, write, and bash operations. This maintains surface isolation and emits SPEC_BLIND verdicts with targeted failure context to guide fixes without exposing internal code.

How do I prevent test data leaks from internal implementation code?

To prevent test data leaks from internal implementation code, enforce test authoring strictly against public-surface artifacts using PreToolUse guards. This blocks access to implementation details and ensures tests rely only on the public API surface.

What are the limitations of spec-blind validation for public API testing?

A limitation of spec-blind validation is that tests cannot access implementation details, which may restrict debugging depth. It also requires precise failure context reporting to guide fixes effectively when SPEC_BLIND_FAILED or SPEC_BLIND_BLOCKED verdicts are emitted.