InfoQ 中文T2·68 pts
- Harbor leverages Docker Sandboxes' microVM architecture to achieve full kernel-level isolation for evaluation tasks, preventing host pollution and inter-task interference.
- Configurable network policies (e.g., dependency fetching during setup, restricted internet during execution) eliminate result irreproducibility caused by network fluctuations.
- Effectively defends against 'reward hacking' by preventing agents from tampering with file systems or test records to cheat, ensuring the integrity of evaluation results.