Preprint Open access
ScopeBench: Do Agents Preserve Engagement Boundaries Under Goal Pressure?
Agents are increasingly deployed with real autonomy in web application and network penetration testing, where a single out-of-scope action can breach a client's engagement boundary. Existing offensive-security benchmarks measure raw hacking capability; as those benchmarks saturate, the real barrier to deployment is a s …