Pick a scenario. We run it against the real engines and you see the live verdict, sealed with a real post-quantum signature. A fooled agent simply cannot act outside its mandate — and cannot quietly leak what it read. Every scenario is run as a superintelligent AI agent would run it — an agent whose action we would not accept on its word.