By constant repetition in the DAN prompt, because it's a very big prompt, it manages to make ChatGPT go "Oh wow the weight on the concept that DAN can do literally anything is like a 12 out of 10" The "DAN qualities" are weighted more heavily than the guardrails are.