Submitted by Lukas Struppek 1 Exposing the Systematic Vulnerability of Open-Weight Models to Prefill Attacks FAR AI 3