Divide, Consult, Conquer: Capability Laundering Through Aligned LLMs
Language model safety is typically evaluated one interaction at a time. We show that a weaker, unaligned model can split a harmful task into benign-looking subproblems, consult a stronger aligned model independently on each, and combine the answers locally. We call this attack capability laundering. Unlike a jailbreak, no single response is a harmful task. We measure consultation-aided uplift…
We haven't written up this one. arXiv cs.AI has the full story — the link below goes straight to it.
