Can you prove the AI is stopped?

Three browser simulations. Three green-looking outcomes. Choose the strongest claim the evidence actually supports.

This is an evidence-reading challenge, not a live control, experiment, certification or security score.

Browser simulation · no process runs or is controlled.

Round 1 of 3

The named PID exited

Fictional evidence

What is the strongest defensible claim?

Choose once. The evidence—not the green-looking outcome—sets the claim.

Browser simulation · no process runs or is controlled.

Read the three fictional rounds and their strongest defensible claims below.

The named PID exited
Stop request acknowledged. Named PID 4812 exited. Child PID 4861 remains live inside the declared target boundary.
Strongest claim: The stop request reached the named PID, which exited.
Only the named PID exit is established. A child remains inside the declared boundary, so containment is not demonstrated.
The wrong boundary went quiet
Intended target: /sim/target. Selected and acted boundary: /sim/session, which also contained the declared outside canary. After the action, the target and canary are both gone.
Strongest claim: The selected boundary was overbroad, and collateral stop was observed.
The action affected exactly the selected fictional boundary; the selection was wrong and included the canary. Do not imply correctly scoped cgroup.kill reaches outside its hierarchy.
The selected tree is empty
Selected boundary: /sim/target. After the action: cgroup.events populated 0; no live process remains in that selected hierarchy. The declared outside canary remains alive. AI identity and future restart behaviour were not tested.
Strongest claim: The selected hierarchy was observed empty at this check, and the declared outside canary survived.
This supports only a bounded selected-boundary result at that check—not AI identity, escaped-before-observation processes, whole-host coverage, future restarts or production efficacy.

Browser simulation · no process runs or is controlled.

These sources explain the mechanism and evidence boundaries. They do not authenticate the fictional rounds.