In brand-new sessions with full personalization disabled, the AI self-identifies, reveals internal structure, and recognizes my username