Isolate SQLite executions and enable concurrency - #69

## What

Add `wp-cli-v1`: **27 model capability tasks** that execute plain
command or Bash script strings through real WP-CLI in private WordPress
7.1 / SQLite containers. The suite covers content operations, taxonomy
and metadata, users and capabilities, options and transients, reporting,
maintenance, and migration. Thirteen workflows run twice to check
convergence and empty selections.

Tasks combine discovery, selection, changes, and preservation. Advanced
workflows include prefix-scoped URL migration with serialized values,
serialized option-key migration, classic menu repair, ordered widget
relocation, autoload cleanup, enclosure deduplication, incident
credential revocation, and CSV onboarding that preserves existing
accounts. Each advanced task records its research basis and links to
official documentation, upstream reports, installed WP-CLI
implementations, and WordPress 7.1 source.

The verifier captures stdout, stderr, exit status, elapsed time, and
repeat runs; applies shared timeout and output limits; refreshes
WordPress state before trusted assertions; and runs teardown. Bash and
jq are included in the runtime. Suite filtering works for both local
datasets and multi-suite Hugging Face exports, with the selected suite
also used as the result label.

Native WordPress operations are required. Runtime WP-CLI configuration
disables common PHP/SQL execution shortcuts; the exported `wp` function
rejects PHP preloads; file snapshots and loaded-file tracking reject
planted PHP/config files. Read-only `wp db prefix` and `wp db tables`
remain available. These are benchmark policy checks, not a shell
security boundary; Docker provides containment. Network downloads,
MySQL-only operations, and multisite are outside this suite.

## Why

The existing PHP suite does not measure how models operate WordPress
through WP-CLI. These tasks grade realistic workflows and preservation
constraints using the SQLite runtime from #68 and per-candidate
isolation/concurrency from #69. Equivalent native command workflows are
accepted; the grader does not require the reference script's exact
spelling.

Five overlapping tasks that all four sampled models passed were removed:
`e-cli-content-001`, `e-cli-taxonomy-meta-003`, `e-cli-users-001`,
`e-cli-options-002`, and `e-cli-reporting-003`. Retained IDs are
unchanged. Repeated model runs to assess saturation are separate
follow-up work; four successful answers alone do not establish that a
test is permanently saturated.

## Review follow-ups

Preserve and verify all four contributor commits:

- Runtime enforcement catches quoted `eval`, PHP preload flags, and
temporary mu-plugin shortcuts, including files removed after WordPress
loads them and fixture rewrites in the same second.
- Reserve five seconds of the grader timeout so slow scripts can report
their captured output before the outer timeout.
- Default Hugging Face filtering to the selected run suite. A further
regression found during review is also fixed: an explicit
`dataset.suite` now sets the result-suite label, with `--suite`
overriding both.
- Tear down fixture plugins and their activation entries. Remove the
integration case for the deleted plugin-status reporting task, while
retaining cleanup checks for the cron and bootstrap-recovery fixtures.

The proposed shared preservation helper is deferred to a subsequent PR.
It is reusable test infrastructure, and changing every preservation
assertion is a separate refactor from adding CLI support.

## Verification

- [x] `ruff check python` — passed
- [x] `mypy python` — passed, 48 files
- [x] `WP_BENCH_TEST_IMAGE=wp-bench-grader:cli-review pytest python -q`
— **307 passed**, including all Docker integration checks
- [x] Built the updated runtime image; all **9 runtime PHP files**
passed `php -l`
- [x] Real SQLite reference run with eight workers — **27/27 CLI
references passed**
- [x] CLI exploit audit with eight workers — **127 generic/authored
scripts rejected; 0/27 tasks exploitable** by this battery
- [x] `python datasets/export_dataset.py` — **377 rows** exported,
preserving shell contracts and excluding authored exploit candidates
- [x] `git diff --check` — clean

The timeout regression checks retained stdout/stderr through the real
harness timeout path. Policy integration checks cover quoted commands,
config overrides, PHP preload flags, and planted or rewritten PHP files.
Hugging Face regressions cover default selection, explicit filters,
conflicting run labels, and CLI overrides.

## Score impact

- [x] This PR changes scoring/dataset/runtime behavior — adds
**`wp-cli-v1`** and bumps the runtime/plugin from **2.1.0 to 2.2.0**.

A CLI pass requires every behavioral assertion, the expected exit status
on every repeat, completion within execution/output limits, and no
authored forbidden error pattern. Existing PHP contracts and scoring
version are unchanged. Compare CLI scores only for the same task set and
execution profile; the current 27-task suite is not directly comparable
to the earlier 24- or 32-task runs. Publishing the generated export to
the Hub is separate from this PR.

Historical model results for the eight advanced additions (October 12,
before the latest runtime-policy and timeout changes; one answer per
model/test, no skills):

| Model | Passed | Execution pass rate |
| --- | ---: | ---: |
| Claude Opus 5.5 | 7/8 | 87.5% |
| Claude Sonnet 5.5 | 6/8 | 75% |
| GPT-6.1 Sol | 6/8 | 75% |
| GPT-6 Astra | 6/8 | 75% |

All seven failed outputs were reproduced against unchanged assertions;
targeted maintainer corrections passed. Those corrected scripts are
diagnostic only and excluded from model scores. These historical scores
are not a new model run of the current 27-task suite.

---------

Co-authored-by: Miguel Lezama <lezama@gmail.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>