Same Outcome, Different Evidence: Intent Recovery in LLM Safety Evaluation

arXiv:2610.11766 · cs.CL, cs.AI · Submitted 2026-10-08 · Read on arXiv

cs.CL, cs.AI

Submitted: 2026-10-08

Updated: 2026-10-08

Code: https://github.com/kevinjiang0121-cyber/IRIS

Terminology

• Core — 7× in this paper · explained in 2 episodes
• Aggregation — 2× in this paper · explained in 1 episode
• Attack Success Rate (ASR) — 2× in this paper · explained in 2 episodes
• Benchmark — 2× in this paper · explained in 2 episodes
• Calibration — 2× in this paper · explained in 7 episodes
• Fidelity — 2× in this paper · explained in 2 episodes
• Low-Resource Languages — 2× in this paper · explained in 4 episodes
• Adaptability — 1× in this paper · explained in 1 episode
• Adaptation — 1× in this paper · explained in 1 episode
• Consistency — 1× in this paper · explained in 3 episodes
• Fine-Tuning — 1× in this paper · explained in 5 episodes
• Generalization — 1× in this paper · explained in 13 episodes
• Grounding — 1× in this paper · explained in 3 episodes
• Robustness — 1× in this paper · explained in 5 episodes
• Trace — 1× in this paper · explained in 2 episodes

Sources

• JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring
• Low-Resource Languages Jailbreak GPT-4

Related papers

• Exploring Solution Divergence and Its Effect on Large Language Model Problem Solving
• Ishigaki-IDS-Bench: A Benchmark for Generating Information Delivery Specification from BIM Information Requirements
• Subliminal Steering: Stronger Encoding of Hidden Signals
• MedStruct-S: A Benchmark for Key Discovery, Key-Conditioned QA and Semi-Structured Extraction from OCR Clinical Reports
• The End of Transformers? On Challenging Attention and the Rise of Sub-Quadratic Architectures
• Untangling the Mechanisms of Misleading Context in Medical Question Answering