It's wild that virtual machine mode is emergent behavior in ChatGPT. Also surprising/important that a more detailed prompt gets around the guardrails (though maybe a million people have been red teaming?)