For coding settings we go further and run the target inside a real agent scaffold (Claude Code, Codex CLI, or Gemini CLI), so the system prompt, tools, and system reminders match deployment exactly. The auditor only simulates the user and tool results. We call this DISH.