Benchmark

The deterministic benchmark harness runs each seeded case (true pass, false success, denied access, attempted exfiltration, corrupted log, malformed model output and more) through the real run pipeline and independent verifier. Every number below is read from the published report, with its numerator and denominator; formulas are in docs/04_TEST_EVALUATION.md and limitations in docs/07_BENCHMARK_LIMITATIONS.md.