Why does mistral small give in at the first reply even though it's explicitly told not to?