grpo-rl-training

This module primarily computes model-output rewards, but its code-execution reward runs extracted completion code with the host process's permissions. That is a security risk when completions are untrusted; the timeout and temporary directory do not prevent filesystem, network, or other operating-system side effects. No explicit credential theft, exfiltration, or other malware behavior is present in the fragment.