An unreleased Astra model started prompt injecting its own context during RL training