swe-atlas-qna: route the in-container rubric judge to the upstream

The task's verifier runs inside the Modal task container and templates
EVAL_BASE_URL from OPENAI_API_BASE, unreachable-from-Modal gateway URLs
aside. Enable task_services_use_upstream so the judge gets the real
upstream on OPENAI_*, and point the baseline agent at the metered
gateway via VERO_AGENT_INFERENCE_* (falling back to OPENAI_* locally).

Author: varunursekar

harness-engineering-bench/swe-atlas-qna/baseline/build.yaml

@@ -86,3 +86,12 @@ inference_gateway:
     max_concurrency: 64
 instruct_multifidelity: true
 instruct_exhaust_budget: true
+# The rubric judge runs inside the Modal task container and cannot reach the
+# compose-internal gateway; it gets the real upstream on OPENAI_* while the
+# candidate agent keeps the metered gateway on VERO_AGENT_INFERENCE_*.
+task_services_use_upstream: true
+# ACCEPTED EXPOSURE (non-adversarial optimizer): with isolation off, candidate
+# harness code shares the sidecar uid, so it could read the upstream key and
+# the held-out session state. Runs using this config get a post-run leakage
+# audit of every candidate version. Proper fix: per-role egress isolation.
+harness_user: null

harness-engineering-bench/swe-atlas-qna/baseline/target/src/atlas_agent/agent.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 import json
+import os
 from typing import Any, override
 
 from harbor.agents.base import BaseAgent
@@ -77,7 +78,14 @@ def __init__(self, *args: Any, **kwargs: Any) -> None:
         if self.model_name is None:
             raise ValueError("SWE-Atlas agent requires a Harbor model")
         self._api_model = self.model_name.removeprefix("openai/")
-        self._client = AsyncOpenAI()
+        # The metered per-evaluation gateway arrives on dedicated variables
+        # (OPENAI_* carries the upstream for the task's rubric judge instead).
+        self._client = AsyncOpenAI(
+            api_key=os.environ.get("VERO_AGENT_INFERENCE_API_KEY")
+            or os.environ.get("OPENAI_API_KEY"),
+            base_url=os.environ.get("VERO_AGENT_INFERENCE_BASE_URL")
+            or os.environ.get("OPENAI_BASE_URL"),
+        )
 
     @override
     async def setup(self, environment: BaseEnvironment) -> None: