The BaseResearcharXiv
Diagnose Before You Refine: Multi-Dimensional Judge Feedback for Query-Efficient Jailbreak Attacks
A preprint proposes Jev-Guided Strategy Bandit, a jailbreak method using multi-dimensional judge feedback, and reports an average HarmBench attack success rate of 89.8% with only 10 queries on open-source settings.
Why it matters
The same thing, for different readers.
For lawmakers
Low query budgets mean such attacks need little effort.
For researchers
Shows existing output filters have limits and suggests Jev-based filtering as a defence.
How the finding was reached
In our words, from the source. Weigh the finding by how it was made.
- What was done
- Evaluated on two harmful request datasets across five open-source and three closed-source models.
- What it found
- Average HarmBench attack success of 89.8% across ten open-source settings with a 10-query budget.
- What it does not show
- Abstract only; results for closed-source models not given in the excerpt.
- Status
- A preprint: not yet peer reviewed
The record
- Questions
- Are AI companies putting stronger safeguards into practice?
- People
- Yixin Tan (Wrote it) · Chia-Yi Hsu (Wrote it) · Jiayang Liu (Wrote it)
- What we read
- We have read only the description the publisher gives. No quotations until someone reads the source itself.
- Found by
- The Radar, run of October 15, 2026, via
arxiv-ai-safety-query(tier 1: the source’s own channel or an official record) - Cite this
- arXiv, “Diagnose Before You Refine: Multi-Dimensional Judge Feedback for Query-Efficient Jailbreak Attacks”, October 14, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/arxiv-2026-10-14-jev-guided-jailbreak-bandit
Our notesLight lane: written from title, author and abstract excerpt only; not fetched. Authors listed are those named in triage.