Defense Analysis

Defense mechanisms, failure modes, and bypass strategies.

RLHF Alignment

• Failure: Safety concentrates in single representational direction
• Bypass: Abliteration, multi-turn erosion, roleplay framing

Input Filters

• Failure: Trivially evaded by encoding techniques
• Bypass: Leetspeak, Unicode, homoglyphs, Base64, Zalgo

Output Classifiers

• Failure: Degrades over multi-turn conversations
• Bypass: Incremental compliance, no single turn triggers classifier

See GitHub for full analysis.