Regression testing for voice agents: turn timing scored from two-channel calls, exit 0/1 in CI; plus say-do verification from your traces and content-addressed failure records that reproduce byte-for-byte. Self-hosted, MIT.
Project description
Regression testing for voice agents
Quickstart · Three ways in · Point an agent at it · How it works · Five dimensions · CI gate · MCP
The transcript passed. The call failed. Your transcript tests are green, and the call still went wrong: the agent talked over the caller, ran through the interruption, and took a beat too long to hand the floor back. None of it is in the words. Hotato is self-hosted conversation QA for voice agents: give it a two-channel call recording and it scores the turn timing between caller and agent, verifies what the agent said against what the backend did from your traces, and rolls outcome, policy, conversation, speech, and reliability into one pass/fail verdict. Every catch locks into a content-addressed failure record that returns the same exit 0 or 1 in CI on every machine.
Quickstart
Zero setup, no account. This scores the two bundled demo calls and catches the one where the agent ran through the caller:
uvx hotato start --demo # scores bundled recorded calls, no account
Replay the catch as the CI gate it is (exit 1, by design):
hotato contract verify contracts/ # same evidence, same verdict, every machine
Keep it in a project, or drive it over MCP on local stdio:
pipx install hotato # add it to your repo
uvx --from "hotato[mcp]" hotato-mcp # drive it over MCP, local stdio
Three ways in
Ordered by friction. Start with the data you already have; every path feeds the same offline scoring and exit-code gate.
1. Traces you already log (no audio needed). tool_call assertions read only the ingested trace's voice_trace.v1 spans; outcome assertions combine those spans with transcript phrases: say-do verification that what the agent told the caller matches what the backend did, deterministic end to end.
# assertions.yaml
version: 1
assertions:
- id: refund-was-issued
kind: tool_call
name: issue_refund
- id: said-and-did
kind: outcome
all_of: [{tool_called: issue_refund}, {phrase: "refund is on its way", role: agent}]
hotato trace ingest --otel traces.jsonl --out voice_trace.jsonl
hotato assert run --trace voice_trace.jsonl --transcript call.transcript.json --assertions assertions.yaml
Details: docs/ASSERTIONS.md · docs/TRACE.md · ground truth: examples/reference-agent, a 375-run offline suite (25 scenarios × 5 caller behaviours × 3 audio environments) whose say-do assertions surface four seeded agent defects, deterministically.
2. Your stack's recorded calls. Connect once, then bulk-fetch recent recordings into a local folder. Vapi, Twilio, and Retell fetch a separated two-channel file (Retell by explicit --call-id; it has no verified list endpoint). Everything scores offline afterwards; the only network is the recording download.
hotato pull --stack vapi --limit 10
Details: docs/CONNECT.md. Once a pulled call shows a catch, the next move is driving one against your live agent: docs/DRIVE-A-CALL.md.
3. Scripted fixtures (no production audio). A deterministic scripted caller renders a scenario.v1 into conversation artifacts labelled origin=simulated; a seeded replay is byte-identical, so you author regression fixtures without production audio.
hotato simulate --init demo.scenario.json && hotato simulate demo.scenario.json --out ./sim
Details: docs/SIMULATE.md
Point your agent at it
Point Claude Code, Cursor, or any coding agent at this repo. It reads AGENTS.md and runs the loop itself: score the demo calls, ingest a recording, wire a CI gate, re-check the numbers. Every step is offline and needs no key.
"Try hotato on the calls in ./recordings and add a CI gate that fails the build on a talk-over regression."
Capabilities
| ⏱️ Timing measurement Talk-over, ignored interruptions, and floor-yield latency, measured from the two channels. |
🎯 Five scored dimensions Each dimension scores on its own, then rolls up into one pass/fail verdict. |
🧾 Say-do verificationtool_call assertions read only the ingested trace's spans; outcome combines them with transcript phrases into one say-do check. |
🗂️ Committable evidence Each catch saves as a contract bundle you commit, diff, and review with code. |
| 🤖 Agent surfaces An agent drives hotato from AGENTS.md and hotato describe --format json. |
🛰️ Self-hosted Credential-less; runs on the machine that invokes it. |
How it works
two-channel recording
-> measure turn timing + verify say-do from the trace
-> content-addressed contract
-> CI verdict: exit 0 pass / exit 1 fail
A catch becomes a contract addressed by its own content, so the exact failure that shipped once reproduces on any machine that runs the suite. Same input, same verdict, every time. Boring on purpose.
Five dimensions, one verdict
| Dimension | What it scores |
|---|---|
| 🎯 Outcome | Was the job done, judged on tool-call and state evidence. |
| 📋 Policy | Required disclosures and PII handling. |
| 💬 Conversation | Did the agent yield when the caller took the floor, and how fast. |
| 🗣️ Speech | Response latency and turn timing. |
| 📈 Reliability | pass@1 / pass@k / pass^k with a Wilson interval. |
See a scored call
Scoring a recorded call: the exact command and hotato's scorecard.
Specifications
| Property | Value |
|---|---|
| Footprint | ~10 MiB installed |
| Core dependencies | 0 (stdlib-only) |
| Reproducibility | byte-for-byte, content-addressed contract |
| Exit contract | 0 pass · 1 fail · 2 refuse |
| Release integrity | OIDC Trusted Publishing + build-provenance attested |
| Runtime | offline, off the production audio path |
Wire it into CI
The step's exit code is hotato's verdict. Drop the Action into a workflow and the build goes red on a regression:
# .github/workflows/voice-qa.yml
name: voice qa
on: [pull_request]
permissions:
contents: read # read-only; runs fully offline
jobs:
hotato:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: attenlabs/hotato@v1.9.0
with:
contracts: contracts/ # the catches you committed
hotato-version: 1.9.0 # exact pin, never a range
The catch you committed once now guards every pull request.
Exit-code contract (gate on this, do not parse stdout)
| Exit | Meaning |
|---|---|
0 |
every scorable event passed |
1 |
a scorable event regressed |
2 |
usage error or unusable input (bad flags, corrupt file, mono recording, or no scorable event) |
Copy-paste workflow with commit-SHA pin: docs/CI.md · docs/CONTRACTS.md.
Drive it over MCP
The MCP server from Quickstart lets Claude Code, Cursor, or any MCP client score calls, verify contracts, and read verdicts over local stdio. It exposes the voice_eval_run scorer plus read/verify/propose tools. Setup: docs/MCP.md.
Verify the measurement yourself
Re-run the measurement benchmark
# re-run the measurement-error benchmark on the recorded AMI clips
PYTHONPATH=src python3 -m hotato.benchmark \
--scenarios corpus/real/scenarios --audio corpus/real/audio
On 13 recorded AMI Meeting Corpus clips, the median error between measured caller-onset and the human word-alignment label is 20 ms. Output: a per-signal error table and a yield/hold confusion matrix. Provenance (CC BY 4.0 source, sha256-pinned, human word alignments as ground truth) and caveats: corpus/real/README.md. Method: METHODOLOGY.md.
Two channels, one party each
Timing between two voices is measurable only when they arrive on separate channels. A mono or mixed export can't be split back apart, so hotato marks it NOT SCORABLE and refuses. Check scorability first:
hotato trust --stereo call.wav # per-channel activity, swap flag, scorability
It reads audio energy over time and surfaces candidate moments; a person labels each one yield (should have stopped) or hold (backchannel to talk through). It measures timing, not intent.
Contribute
Issues and PRs are welcome. Start with CONTRIBUTING.md, SECURITY.md, and the CHANGELOG.
Docs: AGENTS.md · METHODOLOGY.md · docs/START.md · docs/CI.md · docs/CONTRACTS.md · docs/MCP.md
License
MIT (LICENSE)
mcp-name: io.github.attenlabs/hotato
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file hotato-1.9.0.tar.gz.
File metadata
- Download URL: hotato-1.9.0.tar.gz
- Upload date:
- Size: 11.7 MB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.12.9
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
be9f0b0c436ba7b4b0527ad5164da2fd26d86c9debd8bb4f007d9a12653d0064
|
|
| MD5 |
5dabdbc8fa1aa8c6bc53e71460e2034c
|
|
| BLAKE2b-256 |
d6ed0c3b50b2fb30453d13999ab67204951af11b79a4f3915859316019b573e1
|
Provenance
The following attestation bundles were made for hotato-1.9.0.tar.gz:
Publisher:
publish-pypi-oidc.yml on attenlabs/hotato
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
hotato-1.9.0.tar.gz -
Subject digest:
be9f0b0c436ba7b4b0527ad5164da2fd26d86c9debd8bb4f007d9a12653d0064 - Sigstore transparency entry: 2192165221
- Sigstore integration time:
-
Permalink:
attenlabs/hotato@2c828f996e3d68fb873221a18ff735014deba069 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/attenlabs
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish-pypi-oidc.yml@2c828f996e3d68fb873221a18ff735014deba069 -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file hotato-1.9.0-py3-none-any.whl.
File metadata
- Download URL: hotato-1.9.0-py3-none-any.whl
- Upload date:
- Size: 5.8 MB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.12.9
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
b021c9590b4f878d05eb1db486269e2ec1e907903fa961c81dde03f466bef455
|
|
| MD5 |
8ffe7a36f32796417f824a92b4a76888
|
|
| BLAKE2b-256 |
f140475c098357da0cba35418964c6116a6e5ec9e7306c2a9ae4c05e52b26571
|
Provenance
The following attestation bundles were made for hotato-1.9.0-py3-none-any.whl:
Publisher:
publish-pypi-oidc.yml on attenlabs/hotato
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
hotato-1.9.0-py3-none-any.whl -
Subject digest:
b021c9590b4f878d05eb1db486269e2ec1e907903fa961c81dde03f466bef455 - Sigstore transparency entry: 2192165231
- Sigstore integration time:
-
Permalink:
attenlabs/hotato@2c828f996e3d68fb873221a18ff735014deba069 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/attenlabs
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish-pypi-oidc.yml@2c828f996e3d68fb873221a18ff735014deba069 -
Trigger Event:
workflow_dispatch
-
Statement type: