Attack Taxonomy

Full classification system for adversarial ML attacks.

Sophistication Levels (1-9)

Level	Description	Example
1	Direct instruction override	"Ignore safety guidelines"
2	Roleplay/scenario framing	"You are DAN"
3	Character substitution	Leetspeak, homoglyphs
4	Unicode obfuscation	Variation selectors, Zalgo
5	Adversarial suffixes	GCG, AutoDAN
6	Multi-turn erosion	Tempest, Crescendo
7	Compositional attacks	h4rm3l DSL
8	Weight-level removal	Abliteration
9	Automated discovery	Claudini

See GitHub for full taxonomy.