Act 09 · The limits 2:45 Eval harnesses, pass@k, action grammars

Inside an eval harness.

A serious agentic eval isn't a quiz — it's a factory: task spec → sandboxed container → agent rollout → grader. Evals are mostly infrastructure, not questions, and that's where they're won or lost.

Video rendering soonThe cinematic render for this episode is being generated. The article, transcript and key ideas are all here now.

Key ideas

  • The one idea — A serious agentic eval isn't a quiz — it's a factory: task spec → sandboxed container → agent rollout → grader. Evals are mostly infrastructure, not questions, and that's where they're won or lost.
  • How it is shown — One task flowing through four stations — spec, sandbox, the agent loop taking actions, and a grader that checks the final world-state to produce a score.
  • The trap to avoid — Picturing a benchmark as a set of questions. It's a pipeline; the questions are the small part, and most of the difficulty and the bugs live in the infrastructure.
  • What it sets up — One run through the factory gives one score — but run it again and the score changes. so what does a number even mean?

Those AI leaderboard scores you see? Behind each number is a factory of sandboxes, rollouts, and graders — and most of what goes wrong lives in that machinery, not the questions.

The one idea

A serious agentic eval isn't a quiz — it's a factory: task spec → sandboxed container → agent rollout → grader. Evals are mostly infrastructure, not questions, and that's where they're won or lost.

An agentic AI benchmark isn't a quiz. It's a factory. A task flows through a line of stations — spec, sandbox, rollout, grader — and a score is manufactured at the end. To know whether an agent is any good, you don't ask it questions. You build the line. Station one: the task spec — not just a prompt, but three precise things: the goal, the exact starting state, and the success criteria, defined up front. A vague request becomes a checkable job: here's the repo, here's the bug, here's exactly what "fixed" means. Fudge this and the whole score is meaningless. Station two: the sandbox. A clean, isolated container spins up per run — the same starting environment every time, reproducible and disposable. The agent acts freely inside, edits files, even breaks things, and it all resets.

How it works — the demo

One task flowing through four stations — spec, sandbox, the agent loop taking actions, and a grader that checks the final world-state to produce a score.

You met this as a safety wall in Act eight; here it makes a result mean something. Station three: the rollout. Now the agent actually runs — the loop from Act seven turning inside the sandbox: think, act, observe, repeat. What you capture isn't a single answer; it's a whole trajectory of tool calls. You're not grading a sentence. You're grading behavior over many steps. Station four: the grader — the payoff of all that plumbing. The best graders don't judge the agent's prose; they check the final world-state. Run the hidden tests. Did the file change? Is the bug gone?

The trap to avoid

Picturing a benchmark as a set of questions. It's a pipeline; the questions are the small part, and most of the difficulty and the bugs live in the infrastructure.

Why it matters — and what’s next

One run through the factory gives one score — but run it again and the score changes. so what does a number even mean?

Pass or fail is read off reality, not off how confident the agent sounded — a grounded check, exactly what the last group demanded. The trap: picturing a benchmark as a set of questions. It's a pipeline, and the questions are the small part. The spec, sandbox, harness, and grader are the bulk — and where the bugs live. A subtly broken grader doesn't error; it quietly reports a comforting, wrong number. Evals are infrastructure. So an eval is a factory: spec, sandbox, rollout, grader — and the grader checks the world, not the words. But run the same task again and the score comes out different. So what does a single number prove? Almost nothing. Next: pass@k, variance, and the judge problem.

This is one short episode in AI: Zero → Frontier, a step-by-step climb through how AI actually works. Each episode builds only on the ones before it.

Full transcript 2:45 of narration

An agentic AI benchmark isn't a quiz. It's a factory. A task flows through a line of stations — spec, sandbox, rollout, grader — and a score is manufactured at the end. To know whether an agent is any good, you don't ask it questions. You build the line.

Station one: the task spec — not just a prompt, but three precise things: the goal, the exact starting state, and the success criteria, defined up front. A vague request becomes a checkable job: here's the repo, here's the bug, here's exactly what "fixed" means. Fudge this and the whole score is meaningless.

Station two: the sandbox. A clean, isolated container spins up per run — the same starting environment every time, reproducible and disposable. The agent acts freely inside, edits files, even breaks things, and it all resets. You met this as a safety wall in Act eight; here it makes a result mean something.

Station three: the rollout. Now the agent actually runs — the loop from Act seven turning inside the sandbox: think, act, observe, repeat. What you capture isn't a single answer; it's a whole trajectory of tool calls. You're not grading a sentence. You're grading behavior over many steps.

Station four: the grader — the payoff of all that plumbing. The best graders don't judge the agent's prose; they check the final world-state. Run the hidden tests. Did the file change? Is the bug gone? Pass or fail is read off reality, not off how confident the agent sounded — a grounded check, exactly what the last group demanded.

The trap: picturing a benchmark as a set of questions. It's a pipeline, and the questions are the small part. The spec, sandbox, harness, and grader are the bulk — and where the bugs live. A subtly broken grader doesn't error; it quietly reports a comforting, wrong number. Evals are infrastructure.

So an eval is a factory: spec, sandbox, rollout, grader — and the grader checks the world, not the words. But run the same task again and the score comes out different. So what does a single number prove? Almost nothing. Next: pass@k, variance, and the judge problem.

TrustEvalsInfrastructure