Amanda J. Minnich

PyRIT: Democratizing AI Red Teaming Through Open-Source Tooling

Evading Chain-of-Thought Monitoring Through Model Poisoning

Chain-of-thought (CoT) monitoring is an increasingly important component of AI safety stacks but relies on the assumption that a model's reasoning trace is informative about its actions. This work studies the limits of CoT monitoring through the lens of model poisoning. We demonstrate that backdoors can be implanted in...

Probing Warmth-Mediated Harm in Speech-Enabled LLMs for Mental-Health Conversations

Audio LLM benchmarks measure understanding and dialogue quality, not whether speech-enabled models respond with relational warmth when a vulnerable user discloses a mental-health concern. We introduce a 7-turn scripted-disclosure probe grounded in WHO mental-health clinical guidelines, with each script run on the same...