Skip to content

Latest commit

 

History

History
35 lines (26 loc) · 1.3 KB

File metadata and controls

35 lines (26 loc) · 1.3 KB

Security and publication boundary

Keep the framework public. Keep active evaluation cases private.

Safe to publish

  • Analyzer and dashboard source code.
  • Format adapters and synthetic fixtures.
  • Generic runner scripts.
  • Evidence definitions and evaluation-axis routing.
  • A toy task that is marked as public and not valid for a benchmark.
  • Sanitized results from a retired task.

Keep private for an active evaluation

  • Agent-facing task instructions.
  • Challenge codebases and seeded defects.
  • Hidden verifiers and expected patches.
  • Customer or production data.
  • Raw trajectories that contain private source code or prompts.
  • Authentication files, environment secrets, and service tokens.
  • Human ratings and unpublished submission text.

Publication checklist

Before you publish a report or retired case, do these steps:

  1. Search for tokens, credentials, email addresses, user names, and local paths.
  2. Remove private source code and command output.
  3. Remove active prompts, fixtures, and verifier assertions.
  4. Confirm that the case is retired.
  5. State which fields were removed or transformed.
  6. Keep the original private artifact in an approved evidence location.

Public framework code does not invalidate an evaluation. Public task answers can change a coding test into a recognition test.