Agent evaluation and testing

The blocker survives the handoff, the block does not

A write-up of a new paper reports 100% constraint deactivation under ordinary summarization and 54.2% forbidden action. The gap between those two numbers is where your monitoring fails.