The Attack That Left No Fingerprints
It wasn't the model that failed - it was the chatbot. A banking assistant handed over every customer's credential with no jailbreak, no injection, no exploit. And that is exactly why your red-team tool will never catch it.