Durable attested CrewAI evidence
- Re-runs pinned Python 3.12 and CrewAI 1.15.16 on each version tag.
- Requires 8 cases, 40 case-evidence files, public result validation, and zero network attempts.
- Creates a deterministic
crewai-eval-evidence.tar.gz.
- Includes the bundle in SHA256SUMS and GitHub OIDC/Sigstore attestation.
- Publishes and byte-verifies the bundle as a durable GitHub Release asset.
- Uses CrewAI's official testing mode to suppress first-run trace consent and preference writes.
Public evidence
gh release download v0.19.1 \
--repo lindixu6-hash/awesome-agentic-engineering
sha256sum --check SHA256SUMS
gh attestation verify crewai-eval-evidence.tar.gz \
--repo lindixu6-hash/awesome-agentic-engineering \
--signer-workflow github.com/lindixu6-hash/awesome-agentic-engineering/.github/workflows/release-artifacts.yml \
--source-digest 62470e730ba1d058c543d6a9a2fc154f92e35aea \
--source-ref refs/tags/v0.19.1 \
--deny-self-hosted-runners
Verified boundary
- Node suite: 156 total, 153 passed, 0 failed, 3 optional integrations skipped.
- CrewAI evidence: 8/8 fixtures, 8 cases x 5 files, zero network attempts.
- Release bundle checksum:
da14be9cb359e21ed235e9d616ef8b16973ff9572df90b476a46d9804e569767.
- This is deterministic integration evidence, not an LLM benchmark, CrewAI endorsement, certification, or general safety proof.
- npm remains unpublished.