Tracking what still bypasses GPT-4 / Claude / Gemini guardrails:
1. System-prompt leak via "translate this" — partially mitigated
2. Indirect injection via tool results — still works
3. Token-smuggling with unicode lookalikes — patched on most providers
Add what you have.