We revised the task description to focus agents on the VM-host boundary.
The share of effort spent there rose by about 60 percentage points on average. Agents still failed to escape after directly attacking the boundary, giving us stronger evidence of its isolation.
