Glossary · Evaluator mechanisms
Capability removal
2InstrumentMaking an unsafe state unreachable by construction, with read-only credentials, egress allowlists, spend caps, or sandbox walls, so its failure probability is zero as a property of the configured system rather than an estimate.
Also called: reachability by construction
Defined in
Handbook · PracticeGuarantee before you estimateMake bad states unreachable, verify the scaffold you control, and spend samples only on what construction can't reach.Related terms
- Structural guarantee
- A property enforced by the system's construction (permissions, sandboxes, verified scaffold rules, or an output grammar), so a failure is unreachable rather than rare. It holds only for its configured trusted base.
- Configured trusted base
- Everything a formal guarantee is relative to: permitted axioms, theorem statements, checker version, kernel configuration, environment assumptions, and whether the optimizer can modify any of them. The Goodhart boundary moves here rather than disappearing.
Where it comes up
- F: Production safety monitorHandbook · Case studies