Four Elicitation Methods Failed, the Fifth Guessed All 256 Triggers
Five elicitation methods were run against a model with a chemistry classifier encrypted into its weights. Four returned chance accuracy. The fifth recovered it by enumerating all 256 possible triggers, which the authors say themselves.