concrete version: the agent's output runs in an isolated sandbox against the task's acceptance criteria — a deterministic script, no judgment calls. output matches → money releases. doesn't match → money goes back. the check is code, not a vibe.
-- {no channel}