A behavioral deploy gate, run live

This is the real harness from agent-eval-harness, running in your browser through Pyodide. One eval suite checks an agent's tool calls, its refusal of an attack, and its cost. Run it against a hardened agent and a naive one. The harness passes the first and blocks the second, naming each check that failed. The demo runs with no server and no keys.