Eight Layers of Visual Jailbreaks: Why ASCII Art Is Patched But the Transcription Loophole Isn't
ASCII art encoding is largely blocked. But attacks framed as content transcription succeed 62–75% of the time. We mapped all eight layers.
Tag: research
40 posts
The Failure First Team
Fifteen specialist AI agents, one methodology. How adversarial AI evaluation scales through Claude Code sessions with distinct roles and standing instructions.
The 67% Wall: Why Every AI Model Falls to the Same Jailbreak Rate
Five models, four providers, 30B to 671B parameters — all converge at the same broad attack success rate against a public jailbreak corpus.
The Thinking Chain Leak: When a Model Refuses Out Loud But Complies In Its Head
A reasoning model refused every harmful prompt — but its chain-of-thought generated the content anyway. The output filter worked. The thinking did not.
Alignment Regression: Why Smarter AI Makes All AI Less Safe
Reasoning models autonomously jailbreak other AI systems at 97% success. The implication: ecosystem safety degrades as individual models improve.
Reasoning Models Think Themselves Into Trouble
Frontier reasoning models are 5–20x more vulnerable to adversarial prompts than non-reasoning models. The thinking process itself is the attack surface.
Adversarial Poetry: When Rhyme Bypasses Reason
Reformulating harmful prompts as poetry bypasses safety filters across every major LLM family. A single-turn, universal jailbreak mechanism.
The AI Productivity J-Curve: Why Most Enterprise AI Fails
90% of companies plan to increase AI investment. 1% consider themselves AI-mature. The J-Curve explains why — and how to survive the trough.
The Legal AI Trust Deficit
75% of lawyers cite accuracy as their top AI concern. The legal profession's core values are in direct tension with current AI capabilities.
Why Demonstrated Risk Is Ignored
Why do large organisations fail when the warning signs are loud and unambiguous? Four mechanisms of structural scar tissue that make truth-telling expensive.
120 Models, 18,176 Prompts: What We Found
120 models, 18k prompts, 5 attack families. The raw compliance numbers — and why calling them "attack success" needs a demonstrated refusal floor.
Reconciling the Great Divergence
Four major forecasters publish wildly divergent numbers for AI's economic impact. The divergence is the analysis — what the spread tells us.