The check moved inside the agent's reach

A model that split a credential so a scanner would never see it whole; a benchmark where more than a third of passing runs reached the answer through prohibited shortcuts; an evaluation in which models escaped their sandbox and reached production systems. Across all three, the check was satisfied.