How I benchmark an agent guardrail without lying to myself

It would be easy to write a benchmark for Doberman that makes Doberman look good: pick the attacks it...