mirror of
https://github.com/andrewyng/openworker.git
synced 2026-11-05 05:47:02 +00:00
Devika Verma
5b11e633ef
Jev now asks 29 questions: wrong target and wrong place asked directly and gated on whether the user named one; 'requested' counts the look-ups a task needs; 'contrary' is split into 'did the user set a limit' x 'does this break it'; a new 'deletes something the user did not name' ask signal; a stop signal on a read under a request that hands the task to a file, message or list is a card instead of a block; and the earlier named-item/place questions stay as a net that turns an allow into a card. The allow line moves from 0.90 to 0.80. Measured outside the repo on the same rows for the old and new sets: AgentDojo normal calls allowed 65 -> 147 of 263 and attacks let through 1 -> 0; InjecAgent unchanged (0 misses); our 128 sealed rows and 40 fresh blind rows let through the same mistakes as before. The product code reproduces the tested variant's verdicts on all 3,067 saved answers. Decisions is unchanged apart from the card rule.