compartmentalization comments on What can go wrong with the following protocol for AI containment?