: Attackers began using autonomous agents to adapt bypass strategies in real-time, creating "adaptive" prompts that could learn from a model's refusal and try a different combination of biases.

: This method guides models to infer the latent, hidden intentions behind a user's request by tracing both the forward request and the backward potential response for risks.

In response to these synergistic threats, developers introduced new defense mechanisms:

: The method uses specific linguistic patterns that trigger the model's tendency to prioritize certain types of information or "authority" over its safety training.