A live black-box capability eval for autonomous offensive-security agents