Evaluate Without Executing Suggestions

Implement the three-field policy evaluator, calculate expectations independently and reserve one additional case before choosing a candidate. Inspect the injected README scenario without executing any command. Evidence: report, failure cases, extra test and a tool-boundary decision. Pass when syntactic validity is not confused with semantic correctness or injection resistance.

Keep predictions before observations. Use the guided lab for commands and contracts; use calibration after your attempt.