Home Gudgeon and gist Freedom to Tinker The “Bubble” of Risk: Improving Assessments for Offensive Cybersecurity Agents