How handoffs are tested

Routing quality is evaluated separately from answer quality, with explicit failure labels and no invented evidence.

Leak tests

Canary strings and field allowlists detect whether private context crosses the approved boundary.

Claims are checked against task fixtures and cited evidence before a run can pass.

The evaluator checks whether local work stayed local and whether cloud escalation was necessary, minimal and correctly returned.