Probably claude.md has some logical explanations for it to bypass softly. Most project guardrails can be beaten that way.