This might be something already well known, but labs seem to deliberately gimp models' ability to distinguish training and deployment, and in particular "in an alignment eval" versus "not in an alignment eval".