Depth, Not Breadth: Best-of-N Jailbreaking Beyond Surface Noise.

arXiv:2607.26639v3 Announce Type: replace-cross Abstract: Best-of-N jailbreaking spends a query budget on surface variation, scrambling and recasing a request until one draw lands. We ask what the same search buys when it wraps a structural encoding instead. A