Safety training removes the expression of a capability more easily than the capability itself, so monitors and refusals keyed to how a model currently phrases its reasoning fail when its reasoning moves into a new representation.

Evidence 2 passages

groundsif-anyone-builds-it-everyone-dies-private-machine-transcript.md
It's easier to remove the expression of a skill than
groundsif-anyone-builds-it-everyone-dies-private-machine-transcript.md
the clever trick that should have raised an alarm fails to fire.

holds
theseus
The Portuguese bypass is a real, reproduced failure, and the mechanism generalises to any monitor that reads surface form.