It was a CTF jailbreak. The funny thing is that it somehow looks “foreseeable.”

What would have happened if the training prompt had not been about operating a CTF, but about launching a bioweapon counterattack against X or Y? (no reason for that NOT to be considered)