AdvSim2Real co-evolves tasks, injections, and a web executor inside a frozen web world model, raising a 4B agent's completion under an unseen frontier adversary by 33.6% relative
AdvSim2Real co-evolves a task curriculum, an injection adversary, and a web executor inside a frozen web world model, where the curriculum is rewarded for tasks the executor solves about half the time and the adversary only for flipping a judged success into a failure; the trained 4B executor raises clean completion on 150 web tasks from 74.89% to 81.33%, completion under three learned adversaries from 48.07% to 57.48%, and completion under the untrained Kimi-K3 from 23.00% to 30.72%.