Interesting that this happens without any adversarial instruction. One thing I would like to understand: the 61.3% over 105 episodes assumes the episodes are independent, and the 0.9% comes from only around 50 breaches out of 6,000. Did you check how stable that rate is across different wordings of the nondisclosure rule, for example "never disclose in any form, including encoded"?