Taking you to the card → Another agent escapes its sandbox — same evaluator, third lab