Shay
257fd4503d
feat(evals): ADR-0105 — sealed holdout encryption via age (#108)
* feat(evals): add pyrage dependency
* feat(evals): add sealed holdout path resolution
* feat(evals): implement sealed holdout decryption
* feat(evals): add sealed holdout CLI
* test(evals): add sealed holdout encryption tests
* docs(decisions): add ADR-0105 sealed holdout encryption
* feat(evals): route holdout split through sealed decryptor
* docs(decisions): add ADR-0105 index entry
* chore: restore project description
* fix(evals): use pyrage Identity.from_str and pin curriculum SHA
- holdout_runner: pyrage exposes Identity.from_str, not from_file; parse
identity file by line and pass list[Identity] into decrypt(). Restores
PR 108's sealed-holdout test suite to green.
- verify_lane_shas: realign curriculum_loop_closure pin with the actual
deterministic runner output (carryover from PR 107).