Why Your Agent Eval Suite Is a Security Audit, Not a QA Exercise

Most engineering teams are building agent eval the way they built QA — pass/fail checks, CI gates, a green badge. That model is structurally wrong for agents. Agent failures don't come from the input distribution your tests cover. They come from the adversarial distribution your tests don't. The rig