{
  "context": "This evaluation assesses the engineer's ability to use Sharp's operation blocking API to implement security policies. The focus is on correctly using sharp.block() and sharp.unblock() to control libvips operations at runtime for security purposes.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "Use sharp.block()",
      "description": "Uses sharp.block() method to block specific libvips operations by name",
      "max_score": 25
    },
    {
      "name": "Use sharp.unblock()",
      "description": "Uses sharp.unblock() method to unblock previously blocked libvips operations",
      "max_score": 25
    },
    {
      "name": "Block multiple operations",
      "description": "Correctly blocks multiple operations for restricted and standard security modes using arrays or multiple calls to sharp.block()",
      "max_score": 20
    },
    {
      "name": "Validate blocking state",
      "description": "Uses sharp.blocklist() method to verify which operations are currently blocked",
      "max_score": 15
    },
    {
      "name": "Implement policy logic",
      "description": "Correctly implements the three security policies (restricted, standard, full) by blocking appropriate operations for each mode",
      "max_score": 15
    }
  ]
}