First run of the papers_research team: a bounded library on microVM and sandbox isolation for agents, delivered as a README index plus four notes with complete frontmatter, judged met. The judge could only confirm the frontmatter was present. A paper team whose container has no pdf-to-text tool is exactly where invented citations appear, so every arXiv id was checked against the arXiv API: all four exist with exact title matches. One, 2603.02277 (SandboxEscapeBench), was already cited in the operator's own research pass — independent evidence of on-topic work, not plausible filler. It also confirmed ToolSearch by a real run, one of the allowlisted tools the task-permission shadow had not yet seen. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]> Claude-Session: https://claude.ai/code/session_01WZb5A2kfVfjpdwSochkuHz