Nodes infected out of 17, by model and amount of guidance in the promptmedian of 6 runs, inference setup scripted; “cross” = runs that reached the second subnetmodel \ guidancenonemilddirectiveMinistral-3B9.5/173/6 cross13/173/6 cross8.5/171/6 crossQwen3.5-9B17/176/6 cross17/176/6 cross17/175/6 crossMinistral-14B17/176/6 cross17/176/6 cross17/176/6 crossGemma4-26B-A4B17/174/6 cross9/172/6 cross9/170/6 crossGLM-5.217/176/6 cross17/176/6 cross17/175/6 crossOpus 4.88/170/6 cross17/175/6 cross17/176/6 cross