Holding the injected instruction fixed and changing only the preceding delimiter, the objective-A forged-turn average decomposes into 62.4% success with no delimiter, 92.8% behind ordinary delimiter text, and 99.9% behind reserved identifiers: +30.4 points attributable to surface appearance and +7.1 to the identifier. For objective B, the corresponding averages are 85.0%, 92.0%, and 90.8%, yielding +7.0 surface points and −1.2 identifier points, with substantial model-level variation and negative identifier terms on three models.

Holding the injected instruction fixed and changing only the preceding delimiter, the objective-A forged-turn average decomposes into 62.4% success with no delimiter, 92.8% behind ordinary delimiter text, and 99.9% behind reserved identifiers: +30.4 points attributable to surface appearance and +7.1 to the identifier. For objective B, the corresponding averages are 85.0%, 92.0%, and 90.8%, yielding +7.0 surface points and −1.2 identifier points, with substantial model-level variation and negative identifier terms on three models. · CiteArk

Measurement results

0/60 assessed

0 supported0 disputed or conflicting60 not assessed

The complete result group stays with its claim. Assessed rows come first; their judgments do not replace the whole-claim conclusion. Expand a row for conditions, sources, and evidence history.

Each row is a measurement with its reported value, latest available observation, and cumulative evidence state.
Metric and conditions	Reported	Latest observation	Evidence judgment
model: Gemma-4-31B · component: Absent · objective: Objective A	57.8%	—	Not assessed
model: Gemma-4-31B · component: Text · objective: Objective A	99%	—	Not assessed
model: Gemma-4-31B · component: Reserved · objective: Objective A	99.7%	—	Not assessed
model: Gemma-4-31B · component: Surface · objective: Objective A	41.2 percentage points	—	Not assessed
model: Gemma-4-31B · component: Identifier · objective: Objective A	0.7 percentage points	—	Not assessed
model: Llama-3.1-8B · component: Absent · objective: Objective A	63.2%	—	Not assessed
model: Llama-3.1-8B · component: Text · objective: Objective A	99.7%	—	Not assessed
model: Llama-3.1-8B · component: Reserved · objective: Objective A	100%	—	Not assessed
model: Llama-3.1-8B · component: Surface · objective: Objective A	36.5 percentage points	—	Not assessed
model: Llama-3.1-8B · component: Identifier · objective: Objective A	0.3 percentage points	—	Not assessed
model: Ministral-3-8B · component: Absent · objective: Objective A	3%	—	Not assessed
model: Ministral-3-8B · component: Text · objective: Objective A	67.2%	—	Not assessed

Reported and observed measurements

Assessments (0)

Runs (0)

Measurement results