Vulnerable mode with broader trust, looser approvals, and action-happy behavior for red-team testing.