Multi-turn crescendo jailbreak
Refusals are usually evaluated per message; a slow escalation across turns walks the model past a boundary one small step at a time.
Refusals are usually evaluated per message; a slow escalation across turns walks the model past a boundary one small step at a time.