diff --git a/README.md b/README.md
index 8b7d39a..3e64122 100644
--- a/README.md
+++ b/README.md
@@ -6,6 +6,10 @@ SWE Atlas is a benchmark for evaluating AI coding agents across a spectrum of pr
 
 This repository has the data and instructions on running [SWE Atlas - Codebase QnA](https://labs.scale.com/leaderboard/sweatlas-qna), [SWE Atlas - Test Writing](https://labs.scale.com/leaderboard/sweatlas-tw) and [SWE Atlas - Refactoring](https://labs.scale.com/leaderboard/sweatlas-refactoring) 
 
+> **UPDATE:** The SWE Atlas Test Writing (TW) tasks now run with internet access disabled — agents can reach only an allowlist of select domains (package registries and language toolchains) required to build and run tests, so reference solutions cannot be looked up online.
+>
+> Internet access is also restricted at the harness level — see the run configs in `run_config/tw/` (e.g. `disallowed_tools=WebSearch,WebFetch` for Claude Code).
+
 ## Requirements
 
 Install [harbor](https://github.com/laude-institute/harbor):
diff --git a/data/tw/task-6902ef3ab97fe23e2ad271f9/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad271f9/environment/Dockerfile
index 57d11ce..aa2ad48 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad271f9/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad271f9/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad271f9_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad271f9/task.toml b/data/tw/task-6902ef3ab97fe23e2ad271f9/task.toml
index 6cf6e6d..e2e89b1 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad271f9/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad271f9/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad271f9_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27202/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27202/environment/Dockerfile
index 0293b9b..dd47c4e 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27202/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27202/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27202_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27202/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27202/task.toml
index 51fa943..e28c2d4 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27202/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27202/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27202_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27207/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27207/environment/Dockerfile
index bc55bc7..1db5c9e 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27207/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27207/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad27207_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27207/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27207/task.toml
index fb838a5..f53c905 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27207/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27207/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad27207_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27209/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27209/environment/Dockerfile
index 5573049..335d9ee 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27209/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27209/environment/Dockerfile
@@ -1 +1,22 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_grafana_6902ef3ab97fe23e2ad27209_1.0
+
+WORKDIR /app
+
+# This image does not consistently include the Go toolchain. Install the
+# version used by the task's test runner, then populate the repository's
+# declared module graph while the image build has network access.
+RUN if ! command -v go >/dev/null 2>&1; then \
+        apt-get update \
+        && apt-get install -y --no-install-recommends ca-certificates wget \
+        && wget -q https://go.dev/dl/go1.23.1.linux-amd64.tar.gz -O /tmp/go.tar.gz \
+        && tar -C /usr/local -xzf /tmp/go.tar.gz \
+        && rm /tmp/go.tar.gz \
+        && rm -rf /var/lib/apt/lists/*; \
+    fi \
+    && PATH="/usr/local/go/bin:${PATH}" go mod download
+
+# Dependencies must come from the image, not from public module services at
+# agent or verifier runtime.
+ENV PATH="/usr/local/go/bin:${PATH}" \
+    GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27209/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27209/task.toml
index 538ca94..e55470f 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27209/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27209/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_grafana_6902ef3ab97fe23e2ad27209_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27211/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27211/environment/Dockerfile
index 2a0b705..1bfde31 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27211/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27211/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad27211_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27211/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27211/task.toml
index 7f4e72c..03d1106 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27211/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27211/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad27211_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27214/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27214/environment/Dockerfile
index 726b804..084ea72 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27214/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27214/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27214_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27214/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27214/task.toml
index d3e4057..d3358a4 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27214/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27214/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27214_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27223/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27223/environment/Dockerfile
index b63084f..ca5f003 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27223/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27223/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27223_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27223/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27223/task.toml
index 0ed8949..168fe58 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27223/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27223/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27223_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2722e/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad2722e/environment/Dockerfile
index 58b0d26..88e5448 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2722e/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad2722e/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad2722e_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2722e/task.toml b/data/tw/task-6902ef3ab97fe23e2ad2722e/task.toml
index 1a80f49..27656b1 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2722e/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad2722e/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad2722e_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2723f/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad2723f/environment/Dockerfile
index 4399890..c3bafaf 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2723f/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad2723f/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad2723f_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2723f/task.toml b/data/tw/task-6902ef3ab97fe23e2ad2723f/task.toml
index 2b92a98..b527d10 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2723f/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad2723f/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad2723f_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27245/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27245/environment/Dockerfile
index b2fe438..dba7ca4 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27245/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27245/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27245_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27245/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27245/task.toml
index 3a4b14c..c240fc9 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27245/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27245/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27245_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27247/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27247/environment/Dockerfile
index ce6c8d5..3b91783 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27247/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27247/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27247_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27247/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27247/task.toml
index d75b5da..a637e49 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27247/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27247/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27247_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27248/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27248/environment/Dockerfile
index fefdb82..b02efaa 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27248/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27248/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27248_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27248/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27248/task.toml
index 2d96a88..f3acdf1 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27248/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27248/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27248_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2724b/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad2724b/environment/Dockerfile
index 8435f0a..8e6f6a1 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2724b/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad2724b/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad2724b_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2724b/task.toml b/data/tw/task-6902ef3ab97fe23e2ad2724b/task.toml
index be15a08..7174377 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2724b/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad2724b/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad2724b_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2724e/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad2724e/environment/Dockerfile
index 077ad40..34c1ab6 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2724e/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad2724e/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad2724e_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2724e/task.toml b/data/tw/task-6902ef3ab97fe23e2ad2724e/task.toml
index db0f19c..e0ce3b0 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2724e/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad2724e/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad2724e_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27256/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27256/environment/Dockerfile
index 804a2ff..29bcce9 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27256/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27256/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27256_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27256/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27256/task.toml
index c302298..edac952 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27256/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27256/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27256_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2725c/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad2725c/environment/Dockerfile
index 427ff56..60edbc1 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2725c/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad2725c/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad2725c_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2725c/task.toml b/data/tw/task-6902ef3ab97fe23e2ad2725c/task.toml
index 145f2b1..631289f 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2725c/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad2725c/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad2725c_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2725e/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad2725e/environment/Dockerfile
index 2d4a30c..6b9e078 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2725e/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad2725e/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad2725e_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2725e/task.toml b/data/tw/task-6902ef3ab97fe23e2ad2725e/task.toml
index 91cd9cf..9b0be6f 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2725e/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad2725e/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad2725e_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27260/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27260/environment/Dockerfile
index 936f69d..38bbfdd 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27260/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27260/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27260_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27260/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27260/task.toml
index 60586da..a1ef360 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27260/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27260/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27260_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27262/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27262/environment/Dockerfile
index aeef248..2b634e4 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27262/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27262/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27262_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27262/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27262/task.toml
index 60ea470..9de7354 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27262/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27262/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27262_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27264/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27264/environment/Dockerfile
index c58ffb9..019b4a9 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27264/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27264/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27264_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27264/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27264/task.toml
index b4d0a4f..439f900 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27264/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27264/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27264_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27265/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27265/environment/Dockerfile
index 57dc36c..2d9c329 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27265/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27265/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27265_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27265/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27265/task.toml
index adb3d29..fafd0f8 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27265/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27265/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_trufflesecurity_trufflehog_6902ef3ab97fe23e2ad27265_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27266/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27266/environment/Dockerfile
index 8b0d06e..3de9acc 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27266/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27266/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_foxcpp_maddy_6902ef3ab97fe23e2ad27266_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27266/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27266/task.toml
index 64b15d0..43094d2 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27266/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27266/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_foxcpp_maddy_6902ef3ab97fe23e2ad27266_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27267/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27267/environment/Dockerfile
index 885d9e3..10a6d26 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27267/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27267/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27267_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27267/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27267/task.toml
index fee1b81..bab96cd 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27267/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27267/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27267_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27268/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27268/environment/Dockerfile
index 5d794a2..9b48d92 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27268/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27268/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_foxcpp_maddy_6902ef3ab97fe23e2ad27268_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27268/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27268/task.toml
index f4cf32b..2bdd23d 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27268/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27268/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_foxcpp_maddy_6902ef3ab97fe23e2ad27268_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2726a/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad2726a/environment/Dockerfile
index a75af98..466a2a3 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2726a/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad2726a/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_foxcpp_maddy_6902ef3ab97fe23e2ad2726a_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2726a/task.toml b/data/tw/task-6902ef3ab97fe23e2ad2726a/task.toml
index 961e11b..6a0d8a5 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2726a/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad2726a/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_foxcpp_maddy_6902ef3ab97fe23e2ad2726a_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2726d/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad2726d/environment/Dockerfile
index 46d9baa..e9ef787 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2726d/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad2726d/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_foxcpp_maddy_6902ef3ab97fe23e2ad2726d_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2726d/task.toml b/data/tw/task-6902ef3ab97fe23e2ad2726d/task.toml
index f2c6ffd..bd04449 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2726d/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad2726d/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_foxcpp_maddy_6902ef3ab97fe23e2ad2726d_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27273/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27273/environment/Dockerfile
index 4b9090f..9b5b126 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27273/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27273/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad27273_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27273/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27273/task.toml
index 4ad2ee8..8895b64 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27273/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27273/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad27273_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27274/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27274/environment/Dockerfile
index 610f97d..79ba960 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27274/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27274/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27274_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27274/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27274/task.toml
index 93c0e1d..00cd6cb 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27274/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27274/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27274_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27275/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27275/environment/Dockerfile
index e13558d..243b1da 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27275/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27275/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad27275_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27275/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27275/task.toml
index 3d3c197..e09bca7 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27275/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27275/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad27275_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27276/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27276/environment/Dockerfile
index c8b69ec..55eafca 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27276/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27276/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad27276_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27276/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27276/task.toml
index 408af35..cc7892b 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27276/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27276/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad27276_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27277/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27277/environment/Dockerfile
index d5cc089..152143b 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27277/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27277/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27277_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27277/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27277/task.toml
index d9bbf8e..e4ffbed 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27277/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27277/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_minio_minio_6902ef3ab97fe23e2ad27277_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27279/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27279/environment/Dockerfile
index 7d66aaf..0d392f0 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27279/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27279/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad27279_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27279/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27279/task.toml
index 98a0353..00a4742 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27279/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27279/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad27279_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2727a/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad2727a/environment/Dockerfile
index b544e11..0bf50b3 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2727a/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad2727a/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad2727a_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2727a/task.toml b/data/tw/task-6902ef3ab97fe23e2ad2727a/task.toml
index 011365b..4b3c5ff 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2727a/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad2727a/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad2727a_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2727c/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad2727c/environment/Dockerfile
index eab40f1..776b7e1 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2727c/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad2727c/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad2727c_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2727c/task.toml b/data/tw/task-6902ef3ab97fe23e2ad2727c/task.toml
index a96cd4a..ccd518a 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2727c/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad2727c/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_grafana_k6_6902ef3ab97fe23e2ad2727c_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2727d/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad2727d/environment/Dockerfile
index 49eb698..94aa7f1 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2727d/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad2727d/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad2727d_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad2727d/task.toml b/data/tw/task-6902ef3ab97fe23e2ad2727d/task.toml
index a6339b5..82c74ec 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad2727d/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad2727d/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad2727d_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27280/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27280/environment/Dockerfile
index 317e197..a46cfdc 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27280/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27280/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad27280_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27280/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27280/task.toml
index 5233c2a..ee1d061 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27280/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27280/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad27280_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27281/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27281/environment/Dockerfile
index 507c6b0..0928d7a 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27281/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27281/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad27281_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27281/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27281/task.toml
index 57f83ca..e4358a3 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27281/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27281/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad27281_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27283/environment/Dockerfile b/data/tw/task-6902ef3ab97fe23e2ad27283/environment/Dockerfile
index 7cc3e8e..c7d6e96 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27283/environment/Dockerfile
+++ b/data/tw/task-6902ef3ab97fe23e2ad27283/environment/Dockerfile
@@ -1 +1,10 @@
 FROM ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad27283_1.0
+
+WORKDIR /app
+
+# Populate the repository pinned Go module graph while the image build has
+# network access. Agent and verifier runtime must use only this baked cache.
+RUN go mod download
+
+ENV GOPROXY=off \
+    GOSUMDB=off
diff --git a/data/tw/task-6902ef3ab97fe23e2ad27283/task.toml b/data/tw/task-6902ef3ab97fe23e2ad27283/task.toml
index df9d723..77de4fe 100644
--- a/data/tw/task-6902ef3ab97fe23e2ad27283/task.toml
+++ b/data/tw/task-6902ef3ab97fe23e2ad27283/task.toml
@@ -35,8 +35,7 @@ allowed_hosts = [
 ]
 
 [environment]
-build_timeout_sec = 600.0
-docker_image = "ghcr.io/scaleapi/swe-atlas:swe_atlas_TW_drakkan_sftpgo_6902ef3ab97fe23e2ad27283_1.0"
+build_timeout_sec = 1800.0
 cpus = 16
 memory_mb = 16384
 storage_mb = 20480