> From his explanation in these comments, he claims the agent did respond in the beginning but it became too costly, so he just manually checked it after that - did the agent correctly catch malicious messages?
I checked his comments here, he does not make that claim. [EDIT: I mean the claim "It let processed all the non-malicious messages"]
> It did not reject everything, it just stopped the costly processing.
My reading of the article, and of the comments he made here, did not mention anything about false negatives - he never claimed to test false negatives so I am wondering why you think he did.
