Preprint
Aug 2026
Fair ASR: Re-Evaluating Black-Box Jailbreaks under Shared Target-Call Budgets
ReCode is introduced, a compositional budget-efficient attack that combines desensitization rewriting with two effective low-cost primitives identified by Fair-ASR, to provide a comparable evaluation basis for black-box jailbreak attacks under shared target-call budgets B.
Zhida He, Xiaoyu Wen, Han Qi et al.
· 0 citations