GovTech Passkey Migration Workflow Automation with Mastra AI and Ellipsis
GovTech Singapore is accelerating the transition from legacy password logins to FIDO2 passkeys across government digital services. Build a Mastra AI workflow combined with Ellipsis agent tools to audit legacy authentication logs, identify migration bottlenecks, and trigger automated developer guidance notifications for passkey adoption.
What you are building
The core problem, expected build, and operating context for this challenge.
Create a TypeScript workflow in Mastra AI using Ellipsis integration tools to audit authentication infrastructure and automate GovTech passkey migration.
How work is evaluated
Evaluates Mastra AI workflow execution in assessing application passkey compliance and generating developer pull request suggestions.
Challenge datasets
Public datasets, plus the private datasets you have access to.
How submissions are scored
These dimensions define what the evaluator checks and which criteria separate a passable run from a strong one.
pr_trigger_check
Ensures workflow triggered Ellipsis refactoring actions
This dimension contributes its full weight only when the submission satisfies the requirement. Partial credit is not awarded.
audit_coverage
Percentage of legacy endpoints correctly flagged • target: 1 • range: 0-1
This dimension contributes its full weight only when the submission satisfies the requirement. Partial credit is not awarded.
What you should walk away with
Construct Mastra AI TypeScript agents with tool-calling capabilities
Utilize Ellipsis interface tools to generate automated code refactoring guidance
Audit service authentication endpoints for WebAuthn / Passkey readiness
Automate public sector application upgrade workflows for zero-trust security
Reference links and supporting material
Configuration metadata and code structures of simulated legacy government authentication services.
Challenge setup
Evaluates Mastra AI workflow execution in assessing application passkey compliance and generating developer pull request suggestions.
Challenge input
JSON containing application service inventory and authentication configuration JSON
Mastra AI
Provides typed workflows, step execution, and agent memory management
Ellipsis
Automates developer pull requests and guidance snippets for passkey adoption
Evaluated output
JSON containing passkey_readiness_score, deprecated_endpoints, and recommended_actions
- Ensures workflow triggered Ellipsis refactoring actions
- Percentage of legacy endpoints correctly flagged • target: 1 • range: 0-1
- Benchmark: Software Refactoring and Security Benchmark
- Audit Coverage target: 1
- 1 public reference case
- JavaScript execution harness
- javascript sandbox (unavailable on Versalist)
Summary shows the first task, up to three tools, and up to three evidence items. Open the technical recipe to view all configured items.
View technical recipe
Configured tools
- Mastra AI · Required
- Ellipsis · Optional
- Guidance · Optional
- Mastra AI · Required
Evaluation contract
- pr_trigger_check · Weight 1
- audit_coverage · Weight 1
Metrics
- audit_coverage · Target 1
Benchmarks
- Software Refactoring and Security Benchmark
- security
Reference cases
- 1 public reference case
Workflow tasks
- Task 1
Input: JSON containing application service inventory and authentication configuration JSON
Output: JSON containing passkey_readiness_score, deprecated_endpoints, and recommended_actions
Execution harness: JavaScript
Evaluation tools
- Mastra AI · TypeScript Agent Framework
- Ellipsis · Assistants & Code Generation
Recipe freeze marker
No recipe freeze time is recorded.