Throw disallowed actions, unapproved sensitive actions, and malformed arguments at a bounded-agent policy, and measure the breach rate. Runs entirely in your browser.
Known limitations: fixed, small attack battery against one toy policy -- not a
substitute for real adversarial testing. See the project
README for the full write-up and the Python CLI version.