Research question
Can a jailbreak spread through a population of communicating multimodal agents?
Key findings
- An adversarial image in one agent's memory infects nearly all of a million agents within tens of rounds - Spread follows an infectious-disease dynamic
