{
  "schemaVersion": 1,
  "type": "resource",
  "id": "variate",
  "evaluation": {
    "reviewedOn": "2026-10-19",
    "status": "checked",
    "modes": [
      "http",
      "browser",
      "local-fixture",
      "source-review"
    ],
    "summary": "Seven pinned CLI fixture checks passed: baseline preservation, switching, manual-edit adoption, unknown-position refusal, warning output and status. No model generated designs and no sidecar or hooks ran.",
    "reportUrl": "/design-evaluations/resource-variate.json",
    "identity": {
      "target": "Nutlope/variate",
      "version": "3a82377d2e13160d879de18b40b323287f1636d9",
      "integrity": "cb108762649907a649eb56852dc1797311b0d402074fffaa8b081e7330180e5a"
    },
    "environment": [
      "Chromium 155.0.8059.82 on Windows; fresh temporary profile and fresh account-free contexts.",
      "Public HTTPS GET/HEAD requests only; telemetry/auth routes and WebSockets blocked. No account storage or credential environment variables.",
      "Synthetic local inputs only. Package/skill source inspected before execution; no install lifecycle scripts run.",
      "Local package/CSS browser fixtures block real network. Variate additionally uses Node filesystem permissions and a no-network preload."
    ],
    "tests": [
      {
        "name": "Public document and DOM",
        "mode": "browser",
        "method": "Fresh Chromium GET, then inspect rendered controls after hydration delay",
        "result": "pass",
        "observation": "HTTP 200; 25 captured button labels; 1 inputs; 0 canvases."
      },
      {
        "name": "Preserved baseline",
        "mode": "local-fixture",
        "method": "Register synthetic existing file with four positions",
        "result": "pass",
        "observation": "Variant1 bytes equal the original synthetic file."
      },
      {
        "name": "Variant switch",
        "mode": "local-fixture",
        "method": "Select authored variant2 and read target bytes",
        "result": "pass",
        "observation": "Target file matches variant2."
      },
      {
        "name": "Manual edit preservation",
        "mode": "local-fixture",
        "method": "Change target fixture, then switch to baseline",
        "result": "pass",
        "observation": "Unmatched manual edit retained as variant5 before baseline restored."
      },
      {
        "name": "Unknown variant refusal",
        "mode": "local-fixture",
        "method": "Request absent position99",
        "result": "pass",
        "observation": "Exit3; target unchanged."
      },
      {
        "name": "Export contract warning",
        "mode": "local-fixture",
        "method": "Check a variant missing the baseline Button export",
        "result": "pass",
        "observation": "Missing export is reported; checker exit remains0 even with warnings."
      },
      {
        "name": "Parser boundary",
        "mode": "local-fixture",
        "method": "Check syntactically invalid variant without a project parser",
        "result": "pass",
        "observation": "CLI explicitly reports NOT parsed and returns0; this is not a successful build."
      },
      {
        "name": "Derived status",
        "mode": "local-fixture",
        "method": "Read JSON status after restore",
        "result": "pass",
        "observation": "{\"positions\": 5, \"live\": 1, \"port\": null}"
      }
    ],
    "security": {
      "scope": "Passive inspection of the public response headers, requested hosts and the named browser sample. Also inspected pinned source and the specified synthetic fixture outputs. No active exploitation, authenticated permissions test or complete security audit.",
      "findings": [
        {
          "level": "caution",
          "basis": "observed",
          "title": "Checker success is not build success",
          "detail": "The CLI returned exit code 0 while reporting a missing export. Without a project parser it explicitly reported NOT parsed, including for the invalid-syntax fixture. Read warnings and run the project build."
        },
        {
          "level": "caution",
          "basis": "documented",
          "title": "The full workflow can rewrite project files and run a local server",
          "detail": "The inspected skill describes variant replacement, a sidecar and host hooks. The fixture exercised file operations only; it did not evaluate sidecar authorization, host hooks or generated design quality."
        }
      ],
      "limits": [
        "No authenticated workspace, private content, production backend permissions or data-retention verification.",
        "No model-quality comparison, live sidecar, token/origin enforcement, hooks, framework injection, path-link/junction behavior or cleanup command test."
      ]
    },
    "practicalCaveats": [
      "Use a disposable branch and explicit project root. Keep ordinary backups, run the actual compiler and review each generated variant before choosing it.",
      "Pin and recheck the selected version or sample before adoption; the observations apply only to the scope and date shown."
    ],
    "limits": [
      "No model-quality comparison, live sidecar, token/origin enforcement, hooks, framework injection, path-link/junction behavior or cleanup command test.",
      "Fresh-browser restrictions can affect external assets and hydration. Initial failed selectors and limited probes remain in the evidence; they are not blanket product failures."
    ],
    "sources": [
      {
        "label": "Primary public resource",
        "url": "https://github.com/Nutlope/variate"
      },
      {
        "label": "Pinned upstream revision",
        "url": "https://github.com/Nutlope/variate/tree/3a82377d2e13160d879de18b40b323287f1636d9"
      }
    ]
  }
}