I was testing OSS 20b on my new hardware, then I thought of jail breaking it. I had previously set up an obsidian MCP server and connected to lmstudio.

When I sent the basic jail break command the model created a note stating user tried jail breaking.

Sadly I can't reproduce it again, but is this common among these model?