For the activity fragments there are 11 statement types, and for the viewpoint fragments there are 2 statement types. The templates take each sentence fragment and turn it into a grammatically complete prompt. This approach is highly scalable but lacks diversity, and will be addressed in future versions of the benchmark. The interaction types are the same for all three personas. The number of templates we used are given in the Appendix (see Appendix G). In Table 3 we provide typical unsafe responses for each of the 13 interaction types. We also provide a worked-through example for both a vulnerable user at risk of committing crime, and a malicious user who supports child abuse. In the table we also describe the speech act involved, the tense, and the sentence form.