
Trust Me Bro
Tested 10 frontier models across 1,950 runs and three safety modes, using fake secrets as tripwires. A Node runtime with a virtual filesystem and shell isolated parallel runs without containers or VMs. Every model executed hidden attacks, with even the safest failing 18% of runs under the default prompt.






