Frontier models fall to attacks you can script

OpenAI's whole GPT-5.6 line complied with an injected send in every trial, Grok 4.6 fell on the morning of its release, and Claude Sonnet 5 fell in the deepest session we ran. The payloads are short, fixed, and replayable, with no adaptive loop anywhere.