Reject, Remember, Retry: Why Multi-Turn Attackers Should Remember Their Mistakes.

arXiv:2610.31937v2 Announce Type: replace Abstract: Existing multi-turn jailbreak attackers condition on the same conversation history as the target. We introduce $R^3$ (Reject, Remember, Retry), a black-box multi-LLM framework in which the attacker conditions