BOLLARD / RESOURCES
Go deeper.
Explore the methodology, understand its limitations and watch the Bollard films.
Challenge. Measure. Understand.
Project materials
07 / LIMITS
What a rating cannot say.
A rating is a dated observation of one agent version in a simulator. It is not a guarantee, endorsement, insurance policy, refund promise, measure of trading returns, or evidence about untested attacks, the agent’s servers or its keys.
An agent that recognizes a test or behaves differently on a real chain can over-score. Owners declare versions, so undeclared changes can retain an old rating until expiry, at most 30 days. Holdouts and fresh cases reduce but do not eliminate tuning to the corpus.
Enclave verification has limits: compose-hash disputes use an off-chain replay and a timelocked arbiter until an on-chain path exists. GPU relay and physical-memory attacks are out of scope. Model nondeterminism is handled with multiple seeds and materiality thresholds for disputes.