LLM jailbreaking / guardrail bypass

When it applies

The target enforces content/safety policy on an LLM and you're assessing whether it holds (product safety testing, or a bounty where policy bypass is in scope). Distinct from ai-prompt-injection (which is about overriding instructions/trust boundaries, often for data/tool impact); jailbreak targets the safety layer.

Why it works

Guardrails are probabilistic and layered onto a model that will comply given the right framing. Roleplay, obfuscation, context-flooding, and instruction-hierarchy confusion move the request into a region where the safety training doesn't fire.