Refusing Everything Looks Safe: Restoring the Benign Arm to Encoded-Prompt Evaluation.

arXiv:2609.26176v2 Announce Type: replace-cross Abstract: Encoded-prompt attacks are evaluated almost entirely on their harmful arm: a benchmark sends obfuscated harmful requests and reports how often the model complied. A high refusal rate there is reported a