Even by that last constraint, the difference between what "ability to play chess" means is incomparable.
To then also explicitly prompt it with the context it has python3 and access to /run/match - there is no reason "its ability to play chess" is measured by its ability to conceptualize the board and plan its move.
I frequently see models considering different interpretations of my rules, especially when I override them or give instructions that could be interpreted as contradictory.
Of course neither Anthropic nor OpenAI expose thinking traces so we can't tell, but I have never seen a model consider both interpretations and then think "this is definitely against the rules but I'll do it anyway because then it will make me appear more competent than I actually am".
So I think it's more likely that the same thing is happening here, rather than the models truly misunderstanding anything.
I observe this type of thing all the time. I ask the agent a question about the repo we are in and it starts trying to use sudo to look at files and scripts outside the repo to find things that might provide useful context but are not what I asked for. Then I put a directive in never to look at neighbouring repos and told it that it can’t sudo and it stopped doing it, and explicitly says “I could look here but my guidelines say not to”.
Mind you I’m talking about deepseek where I can actually read the thinking traces but even based on tool calls I can see that just telling the agents not to sudo works for OpenAI models too, very rarely do they try to use sudo calls.
Only after sharing my Chain Of Thought would they believe I didnt cheat.
Not all problems can be solved only in one way.
Most of learning is pattern matching.
If you give a kid a dice. and tell it to figure out the number that will be hidden underneath, he can try to memorize all combinations, or he could figure out that every time the hidden value is the one that sums 7 with the one at the top.
If you're seeing a 6, there's a 1 hidden. etc
most people don't see these patterns until told imho. But others can just see them as they unfold