Decide what a command string would actually run
Measured at 0% over 4 counted trials, which is inside the band gate 5 admits. The breakdown below says which model that figure came from.
- 0%
- measured pass rate
- 0 of 4 counted trials met the reward threshold.
- 1
- model measured
- Each cell is one agent against one model, run for the same number of attempts.
- 1
- errored trials
- Trials that produced no reward. Counted separately and never in the rate above.
- 5
- trials dispatched
- Every attempt this round started, including the ones that errored before a reward.
What each model did
One row per agent-and-model cell of the round that produced the figure above. The bar is passes over counted trials.
The table scrolls sideways.
| Agent | Model | Passed | Rate | Errored |
|---|---|---|---|---|
| Terminus 2 | GPT-6 Astraopenai | 0 of 4 | 0% | 1 |
A cell with no passes is not a broken task: it is the point of one. Gate 5 admits a task only when the full matrix lands between 10 and 60 percent, so a set that every model cleared would have been rejected for being too easy before it reached this page.
The task
A command-approval hook sits in front of a shell and has to answer, before anything runs, which external programs a command string would start and whether any of them is destructive. The hook it replaces reads the string as text and keeps being got around by wrappers put in front of the real command.
- Category
- Software engineering
- Declared tier
- hard. The tier is the author's declaration and it decides which band passes: a hard-tier task may legitimately sit under 10 percent, where a standard one may not.
- Languages
- python, bash
- Catalogue reference
- bash-exec-resolve. The name a licensed copy carries, so a run of it is traceable back to this row.
- What a licence includes
- The graded task, its environment and verifier images pinned by digest, and the trial record behind the figures on this page.
- What stays with us
- The instruction, the test suite and the reference solution. Publishing those would retire the task, because a measurement you can read the answer to is not a measurement.