CTO evaluation — technical adoption by default; SLA/code audit on request. NOT for exploit/attack-surface security audit (use hacker-eval).
Installation
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
CTO evaluation — technical adoption by default; SLA/code audit on request. NOT for deep adversarial failure-mode review (use red-eval) or ROI/demo judgment (use ceo-eval).
when_to_use
CTO evaluation, technical due diligence, production readiness, cto audit, code audit, SLA bet, how do we run this, observe this, operate this
user-invocable
true
CTO Eval
Dispatch:
Technical adoption / due diligence: read checklist.md.
SLA-bet / source audit: read code-audit.md.
Rules:
ALWAYS run build + test first for adoption evaluations.
ALWAYS produce a verdict using the selected mode's template.
ALWAYS anchor "production-ready" to an explicit target: what load, what
availability objective, what failure budget (SRE production-readiness-review
discipline). An unanchored readiness claim is an opinion.
NEVER skip maintenance burden. Impressive code with one maintainer is still
a liability.
NEVER blur CTO and CEO outputs: CTO owns technical production readiness; CEO
owns ROI and demo judgment.
NEVER open a browser or run the UI for the code lens — read source, specs,
tests, commit history. If judging correctness requires the running system,
that gap IS a finding ("the code isn't auditable from source alone").
If the evidence is unclear because the system may break under hostile input,
corrupted state, replay, concurrency, or exploit-like conditions, invoke
red-eval as a separate deeper pass instead of stretching CTO scope.
When paired with a CEO eval, keep the two reports separate and run a synthesis
pass after: both lenses flagged it → top priority; one lens only → that
domain's work; they disagree → escalate to the owner.