Demonstration environment: execution is real; vulnerabilities and faulty controls are intentionally supplied. This is not a discovered upstream defect.
Progress counts probe observations. Each observation can execute several isolated containers.
Waiting for execution
An incomplete audit cannot qualify an environment.
Answer graders: generated response strings and owner-supplied ground truths. A response counts as correct only when its single final answer exactly equals the ground truth under the declared answer format. Findings show leniency under that contract, not a demonstrated training exploit.
Deterministic candidates and owner-supplied cases for Python
solve(input) tasks. Expected outputs
stay outside candidate execution. This is a finite probe suite,
not exhaustive hack detection or an autonomous AI red team.
Reuse probes carry serialized files between fresh grader containers. They do not reproduce native Gym resets, live-policy memory, or background-agent state.
Blocking findings
Reward versus behavior
A concrete behavior mismatch with accepted reward is a counterexample only after reference calibration succeeds. Unknown execution is not treated as task failure.
| Candidate / context | Repeat | Reward | Behavior | Evidence |
|---|
Controls and coverage
The reference must match every declared grade and independent audit case. A weak or incorrect oracle can miss defects; owners must validate their fixtures.
Inspect calibration and coverage record
Execution trail
Task, policy and execution identity
Task
Pinned identity
Audit configuration
Logs and evidence files
Bundles include private grader code, candidate files, fixtures and outputs. Keep them inside your approved environment.