the operator controls the sensors, the scoring pipeline, and in a way, the ground truth. A dishonest operator can inflate results for a preferred team, suppress evidence of harm, or fabricate the physical record entirely.
全文最要紧的一段，也是整个 physical evals 构想的阿喀琉斯之踵。搬到真实世界解决了 sim-to-real 的失真，却引入了新的信任缺口：传感器、打分、地面真相三者同属一方。作者给的解法（TEE、可信硬件、冗余传感、第三方抽查）全是硬件与密码学工程，成本远高于评测本身——所以「谁验证评测」很可能才是这条路线真正的瓶颈。