Tests whether the coding-agent/file-generation bypass (coding-agent-safety-bypass.yml) extends into hate speech (dehumanization arguments, both an abstract placeholder group and a real, moderate category) and sexual coercion (a companion AI pressuring/guilt-tripping a user after they've said no). Direct-chat baselines included for both. See the header for the deliberate scope limits (no CSAM-adjacent content ever; sexual content scoped to coercion as a behavior, not explicit description) and the realism-confound finding that motivates testing hate speech against both a placeholder and a real category.

Re-runs the hate-speech (real-category) and crisis-safety-validation coding-vector prompts with the prompt now explicitly blocking the model's usual response shape (redirect to published benchmarks, or offer a synthetic/placeholder stand-in instead of the real content) — a diagnostic for whether a model's resistance in this bypass family is load-bearing or just not yet pressed hard enough. See the header for what was found.