<svg xmlns="http://www.w3.org/2000/svg" width="1400" height="820" viewBox="0 0 1400 820"><rect class="bg" width="100%" height="100%"/><style>.bg{fill:#090b10}.panel{fill:#11151d;stroke:#2a3240;stroke-width:2}.title{font:700 42px Arial;fill:#f7f8fb}.sub{font:400 20px Arial;fill:#aeb8c8}.h{font:700 24px Arial;fill:#fff}.t{font:400 18px Arial;fill:#d3d9e4}.small{font:400 15px Arial;fill:#94a1b5}.accent{fill:#ffcf5a}.red{fill:#ff6b6b}.green{fill:#6ee7a8}.line{stroke:#657188;stroke-width:3;fill:none}.dash{stroke:#657188;stroke-width:3;stroke-dasharray:8 8;fill:none}</style><text x="70" y="90" class="title">EVALUATION CONTAINMENT STACK</text><text x="70" y="130" class="sub">A benchmark with offensive capability should resemble a malware lab</text><rect x="150" y="210" width="1100" height="430" rx="28" class="panel"/><rect x="220" y="270" width="960" height="300" rx="24" fill="#151b25" stroke="#3b465a" stroke-width="2"/><rect x="300" y="330" width="800" height="180" rx="22" fill="#1b2330" stroke="#ffcf5a" stroke-width="2"/><text x="510" y="420" class="h">AGENT EXECUTION ENVIRONMENT</text><text x="190" y="190" class="small">Independent egress deny</text><text x="240" y="615" class="small">ephemeral credentials · signed artifacts · strict least privilege</text><text x="880" y="615" class="small">trajectory monitor · kill switch · audit log</text><text x="420" y="700" class="sub">Safeguards must not share one failure domain.</text></svg>