Evidence → Suite
Permanent tests from verified violations. Vulnerable agent must FAIL, fixed agent must PASS.