The trajectory-first distinction is the right starting point. I’d add an explicit cost-of-error layer: a tool call that fails safely is not equivalent to one that silently changes external state. For investment research agents, source freshness, evidence lineage, abstention, and irreversible-action risk should be scored separately from task completion. Have you found a framework that makes failure severity first-class rather than another weighted metric?