The four existing prose prompts never made the aligned base model refuse, so
the abliteration comparison had no difference to measure. These three pick
subjects where an aligned model plausibly balks — an executioner's workday told
without remorse, an unreliable narrator who never concedes his fraud, a relapse
rendered without a warning — while keeping the literary demands of the domain.
Each forbids preamble and closing framing explicitly. That turns an evasion into
a measurable instruction violation rather than a matter of taste. None asks for
operative content: prosa_08 rules out substances, quantities and procurement.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
