Skip to content

Glossary · Evaluator mechanisms

Capability removal

2Instrument

Making an unsafe state unreachable by construction, with read-only credentials, egress allowlists, spend caps, or sandbox walls, so its failure probability is zero as a property of the configured system rather than an estimate.

Also called: reachability by construction

Defined in

Handbook · PracticeGuarantee before you estimateMake bad states unreachable, verify the scaffold you control, and spend samples only on what construction can't reach.
Structural guarantee
A property enforced by the system's construction (permissions, sandboxes, verified scaffold rules, or an output grammar), so a failure is unreachable rather than rare. It holds only for its configured trusted base.
Configured trusted base
Everything a formal guarantee is relative to: permitted axioms, theorem statements, checker version, kernel configuration, environment assumptions, and whether the optimizer can modify any of them. The Goodhart boundary moves here rather than disappearing.

Where it comes up

See it in the full glossary →