The Fragility of Jailbreak Robustness Across Operational States

Yuna Park, Hwang Youn Kim, Yujin Kim +3

Existing jailbreak evaluations typically characterize robustness using a single attack success rate (ASR) measured in a default configuration (the vanilla state). However, user-LLM…