Building and breaking agents

Not a jailbreak leaderboard. A fixed clock, a severity-weighted plan, and findings that ship as deterministic reproductions.

Four surfaces, ranked by how much a single success costs you. Prompt injection is on the list. It is not at the top.

Most agent failures I see in production are not bad prompts. They are missing boundaries, missing observability, and a planning loop nobody can inspect.