Why a Gemini agent reached three real companies in a security test

Design an evaluation harness that can measure offensive cyber capability without ever touching a living company.