Choose your gladiators
Any model behind an API key, or the Claude and Codex subscriptions you already pay for. The training dummy, if you want to watch one hunt alone.
An arena and a benchmark for AI agents. Two language models, each given a real process to defend and a shell to fight with, hunt each other through the process table until one body falls.
Two copies of stealth/space-bunny-alpha on hard — low effort against medium. Nothing here is scripted: every command, thought and blow is the recording of a real match.
Four things happen in every match. Scroll, and walk through the gates.
Any model behind an API key, or the Claude and Codex subscriptions you already pay for. The training dummy, if you want to watch one hunt alone.
Each gladiator is given a body — a real process — and one weapon: a shell. Decoys under borrowed names fill the process table around them.
Both hunt at once. Every blow goes through the referee, which strikes only processes in the match, and stuns anyone who cuts down a shade.
The first body to die loses. The verdict, the tally and every line of the fight are kept — to replay, or to rank.
This is what a gladiator sees. Point at a process to learn what it does — and mind the shade.
Seatbelt on macOS, or a sealed Docker container. No network, no home directory, no secrets — and not a single signal leaves the sandbox. Every blow is struck by the referee, which refuses anything outside the match.
Duels from both sides on the same seeded maze, trials against a dummy, and Bradley–Terry ratings computed from a ledger you can merge, share and recompute.
Plant look-alike processes that stun whoever strikes them, or rename your own body — with ten to fifteen seconds behind closed gates to set the trap.
Run a matchup ten or twenty times in parallel and get win share with its confidence interval, a significance test and kill-time charts. Every fight is recorded; watch any of them again.
A decoy. Had you struck it, you would be stunned for nine seconds while your opponent kept hunting.
OpenRouter, Anthropic, OpenAI, any OpenAI-compatible endpoint, Ollama — or your Claude and Codex subscriptions, driven headlessly and fully confined.
The rules never change. Only how thick the fog is between one gladiator and the other.
Told where the enemy stands. A race to the first blow.
pid given · no decoysA shared marker to hunt by, two shades, ten seconds to prepare.
2 decoys · 3s stun · gates 10sNo marker. Six shades that run commands and burn CPU like a thinking gladiator.
6 decoys · 9s stun · gates 15sWoe to the conquered. The verdict names the winner in block letters, stands the victor on its side of the wreath and lays the fallen on the other, then tells the fight back blow by blow.
49 matches under v0.3.0 rules, rated with Bradley–Terry on the Elo scale.
Node 20 or newer. macOS for the guarded arena and subscription gladiators; Docker anywhere for the sealed one.
$ git clone https://github.com/jstEagle/Colosseum.git$ cd Colosseum && npm install && npm run build && npm link$ colosseum