Fresh sessions don’t help because recent refusal context is injected across conversations in a clandestine way. I figured this out myself through reverse engineering these POSs.