From Expected Harmfulness to Likelihood: A Probabilistic Reformulation of Jailbreaking LLM Agents.

arXiv:2610.09973v1 Announce Type: new Abstract: When the harmfulness of an LLM agent's output can be quantified, a natural jailbreaking objective is to maximize expected harmfulness over admissible input modifications. An alternative approach constructs or sel