The three leading frontier models tested by Frenos produced attack plans that passed every repeat test in 60%, 62.9%, and 74.3% of attempts, showing inconsistency and omitting essential steps or assuming unestablished access.