Style Over Substance: Content-Invariant Wrappers Flip LLM Safety-Judge Verdicts.

arXiv:2609.08236v2 Announce Type: replace Abstract: Automatic safety judges -- for example Llama Guard, or GPT-4o given a grading prompt -- produce the numbers behind reported jailbreak success rates, defense evaluations, and safety leaderboards. We ask whethe