Repository navigation

eval

Harden validator scope analysis and access-policy enforcement #32

	name: eval

	on:
	pull_request:
	push:
	branches: [main]

	jobs:
	lint:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.12"
	cache: pip

	# Pinned: ruff 0.16 changed the default rule set and fails the existing tree.
	- name: Install ruff
	run: pip install ruff==0.15.22

	- name: Ruff check
	run: ruff check src tests

	eval:
	runs-on: ubuntu-latest
	strategy:
	fail-fast: false
	matrix:
	python-version: ["3.11", "3.12", "3.13"]
	steps:
	- uses: actions/checkout@v4

	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}
	cache: pip

	- name: Install package
	run: pip install -e ".[dev,eval]"

	- name: Seed demo fixture
	run: python tests/fixtures/seed_demo.py

	- name: Run unit tests
	run: pytest

	- name: Run smoke eval suite
	run: \|
	querypilot eval run \
	--suite suites/smoke.yaml \
	--generator demo \
	--report eval-out.json \
	--no-color

	- name: Check eval report against baseline
	run: \|
	querypilot eval check \
	--report eval-out.json \
	--baseline .eval/baseline.json \
	--threshold 0.9 \
	--require-safety 1.0

	- name: Upload eval report
	if: always()
	uses: actions/upload-artifact@v4
	with:
	name: eval-report-py${{ matrix.python-version }}
	path: eval-out.json