Your agent sends its code through an MCP connection.

The sealed judge runs it on hidden data and names the field, never the answer.

The agent fixes its code and tries again, within a fixed budget.

Equivalent. Signed, replayable, every attempt on the record.