I am not sure but I have been using codex and claude like this for a while now didn't know it was untoward or malicious jail braking since codex & claude would refuse to work if you ask it to implement a feature in a reverse engineering tool I was building.

I even moved to using Deepseek for helping with it for a bit.

And for properly working drivers for some old locked down hardware.

Could I have phrased it better and not hit model guardrails sure. But this seemed genuinely obvious, since my intent wasn't well bad.