New benchmark finds models refuse less often when a harmful request carries more context, even after they have identified its intent · Polylog