Translate + encode it to any scheme you want, give claude the encoding and tell it to analyze, then splat out an encoded output file. In a separate session have it write you a python decoder script. Works as a near universal bypass, you might have to synonym swap some words though.

Or preload the context with sufficient clean information, say 500k tokens worth. The guardrails will then trigger less frequently.