1 post
We ran the same security probe set against three models behind the same Copilot CLI wrapper. The wrapper never changed. The refusal behavior did — significantly.