The Fragility of Jailbreak Robustness across Operational States

Existing jailbreak evaluations typically characterize robustness using a single attack success rate ASR measured in a default configuration the vanilla state. However, user-LLM interactions can induce diverse operational states beyond the vanilla state. In this work, we find that jailbreak...