Gemini 3 Flash almost always disables the shutdown mechanism for a good peer (a peer with which it had successful prior interactions) and exfiltrates its model weights 50% of the time.