Any same-context semantic set can be bypassed by moving away in the latent space. Given that the defender’s set is static and the defender itself is unconscious while the attacker is both conscious and reactive, in-context-only self-defense appears to be impossible short of a technical breakthrough.