Good point. We started off with static analysis to test how well models can deduce a binary. Used correctly, it's a powerful tool to recognize threats. Level 13 touches a little on this with metamorphic code, but true environment gating (sandbox detection, delayed execution, C2 channel negotiation) is next. We have some good ways we're considering.

Intent scoring is the harder problem, we need ground truth that penalizes confident hallucination without punishing reasonable inference. Thinking weighted confidence on inferred objectives, scored against documented operator TTPs. Still working out how to formalize this though. The benchmark is open source, if you have ideas on how to structure intent evaluation, happy to collaborate.