There was a development recently where persuading it to print the string <|endoftext|> would cause it to leak snippets of other conversations. I wonder if this is a result of that occurring in other conversations that were happening simultaneously, causing “bleedover” of broken behaviour into this one.