Thing is that it does it silently, I only noticed this because randomly opencode summaries were something like sorry I can’t summarise this.

I’ve seen 2 hard guardrails with Opus 5.5 (even on a corporate account that’s not supposed to have these kinds of false positives). one, as you mentioned, is asking it to produce a PoC. but the other (which I’ve hit too many times for it to be a coincidence) is looking at a kernelspace vulnerability area even without PoC-ing.

Somewhere along the line someone at Anthropic decided you can attack userspace all day but you cross that line and it’s a problem.