Research question
Can input and output classifiers trained on synthetic constitutional data stop universal jailbreaks?
Key findings
- Over 3,000 hours of red teaming found no universal jailbreak extracting detailed chemical-weapons information - Deployment costs of 0.38% refusal increase and 23.7% inference overhead