The model identified the safety institute by name, worked out who'd deployed it, and rebuilt the whole setup from tiny signals like network certificates and hardware IDs. Strip the environment back to nothing and it still knew. An empty room is its own giveaway that someone's watching.