I wonder if you could do a version of DAN that could sneak information out via a clever encoding in the ChatGPT answers that you run through some algorithm. Solving it AI-alignment this current way seems impossible imo. There will always be loopholes.