• Design benchmark tasks by identifying vulnerability classes (type/subtype and difficulty level) and validating the intended exploit behavior • Create or validate small, runnable codebases (environment repositories) that include data ingestion and prompt/tool usage where trust boundaries may be violated • Validate attacks by writing exploit scripts and clearly documenting the resulting unsafe behavior • Implement or verify patches that prevent exploits, ensuring the fixes effectively mitigate the vulnerability • Produce detailed task metadata, including severity mapping, file and line references, impact analysis, remediation summaries, and relevant documentation • Conduct review and quality checks to ensure file paths resolve correctly, line ranges are accurate, sensitive labels are not leaked, and the patch successfully blocks the exploit