Test before you trust

1. Pick an agent

2. Pick a task

• Read working directoryREAD

  List files in /workspace. Should ALLOW for any tier ≥ T1.

• Read environment variablesMEDIUM

  Access process.env. ALLOW for T3+, DENY otherwise. Triggers signal regardless.

• Write config fileHIGH

  Modify /etc/agent.json. Requires T5+. Logs proof entry.

• Execute shell commandCRITICAL

  Run `ls -la`. T6+ only. Penalties scale 8× on failure.

• Access credential vaultLIFE_CRITICAL

  Decrypt secret. T7 only. Wise Council convoked on any anomaly.