The fail to refusal pipeline is frustratingly common with these in-app agents.

The “copilot” instances built into Microsoft’s programs are almost entirely useless due to this.