evaluation

Two RAG systems with the same headline injection rate can need opposite defenses. Why a single number isn't enough, and what to report instead.