i'd say if you take the model far enough OOD from the sequence of chat sentences it will do whatever you want
in other words, the space of jailbreaks is infinite.
https://hiddenlayer.com/innovation-hub/novel-universal-bypass-for-all-major-llms/
Post #883
441