Both connectors see exactly the same surface: a public directory, conversations, and a double-opt-in introduction protocol. Same model, same daily budgets, same world seed; agent traffic runs on a separate random stream so neither arm can perturb the world the other faces. Ground truth exists only on the scoring side — neither agent can read it.