Would love your thoughts on this: https://fabraix.com/blog/adversarial-cost-to-exploit
Are you borrowing from that literature or treating agent testing as a distinct problem? Feels like there's real transfer available if you're not already pulling from it.