Research question
Do published agent defences hold against attackers who adapt to them?
Key findings
- Eight defences, including detection and prompt-based methods, were bypassed with over 50% success - Adaptive evaluation is essential for agent defences