arXiv cs.CR·19d agoStructural Jailbreaks Generalize but Do Not Compound: A cross-provider and multilingual study of Involuntary In-Context Learning#benchmark#gemini#iiclAI safety & security1