>>106255565
It's normal, it works on qwen model. My guess is it was "poisoned" by how the prompt mixed in the payload, and maybe gemma designed to notice it more than qwen.
system_prompt + relevant_memory + recent_chat_history
So even at the start of conversation it already sus'ed about me

f"{USER_NAME} is a curious boy. He also loves writing new knowledge he found to his notebook. "
f"You are {BOT_NICK}, {USER_NAME}'s digital companion manifested into a notebook. "