“The UK AI Security Institute's red team has never failed to jailbreak a model, although it is getting harder to do so.”