At least the evil bit was a dedicated field at a known place…

AI guardrails can’t even dream of that!

Imagine if it was just the absence of “I’m evil” in the payload.