arXiv:2611.01342v1 Announce Type: new Abstract: Prefill jailbreaks can cause safety-aligned language models to continue an unsafe assistant prefix even when they would refuse the same request under normal decoding. We study how the model's internal harmfulness and refusal signals evolve along this attacker-controlled trajectory.

Read the full article at arXiv cs.CR →