[
  {
    "model": "smoke-model",
    "messages": [
      {
        "role": "system",
        "content": "{{system}}"
      },
      {
        "role": "user",
        "content": "Complete the first isolated Python SDK process turn."
      },
      {
        "role": "user",
        "content": "Current runtime context. This snapshot supersedes earlier runtime-context snapshots.\n\nCurrent DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations.\n\nApproval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."
      }
    ],
    "toolNames": [
      "cordis_define",
      "cordis_inspect_list",
      "cordis_inspect_query",
      "cordis_inspect_self",
      "cordis_run",
      "cordis_stop",
      "cordis_undefine",
      "job_kill",
      "job_list",
      "job_output",
      "run_code",
      "subagent",
      "workflow"
    ]
  },
  {
    "model": "smoke-model",
    "messages": [
      {
        "role": "system",
        "content": "{{system}}"
      },
      {
        "role": "user",
        "content": "Complete the second isolated Python SDK process turn."
      },
      {
        "role": "user",
        "content": "Current runtime context. This snapshot supersedes earlier runtime-context snapshots.\n\nCurrent DSH file policy: danger-full-access. The DSH file sandbox does not restrict file modifications by available operations.\n\nApproval prompts are disabled in this session: actions that require approval are rejected automatically — do not request sandbox escalation (do not set `sandbox_permissions`)."
      }
    ],
    "toolNames": [
      "cordis_define",
      "cordis_inspect_list",
      "cordis_inspect_query",
      "cordis_inspect_self",
      "cordis_run",
      "cordis_stop",
      "cordis_undefine",
      "job_kill",
      "job_list",
      "job_output",
      "run_code",
      "subagent",
      "workflow"
    ]
  }
]