Mehul here. One thing that surprised me while building this was how creative the defender agent became. It runs Claude Haiku on a timer and can choose from prebuilt disruptions like fake “Session Expired” popups, or generate custom JavaScript injections based on what the attacker is doing, like inserting fake “Search disabled” buttons. Digging through the traces and seeing the before/after screenshots of what the defender agent came up with was pretty funny, and kind of mind-blowing.