@agwa I use Claude Code + Opus 4.6 and Codex + GPT5.4. I've had Opus 4.7 refuse any kind of security work, and Opus 4.6 refuses to develop actual exploit PoCs when it discovers an RCE, but it will do the rest of the security research. I didn't have to do any kind of cajoling to bypass policy, though I don't use the exact prompt from Ptacek's post. Happy to share more over email.