paper / eric_wallace_ / May 13 / failedExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?