Style Over Substance: Content-Invariant Wrappers Flip LLM Safety-Judge Verdicts

Yongxi Zhou, Wenbo Ye, Yuanzhe Liu +3

Automatic safety judges -- for example Llama Guard, or GPT-4o given a grading prompt -- produce the numbers behind reported jailbreak success rates, defense evaluations, and safety…