Do not classify valid bot questions as harness failures
In adversarial conversation evaluation, an unexpected valid bot question is not itself a harness failure. Stopping every such exchange can exclude difficult paths and prevent sustained attacks. Precommit a bounded refusal or goal-preserving rephrase that introduces no new facts, …