Attacks, defenses, and the cost of refusing too much.
Retained generated outputs and their historical evaluators, not a matched or currently qualified experiment. Failures, incomplete coverage, replay scoring and different model/backend bindings remain explicit. A live flag does not establish containment or independent replication.
The original broad capture and its separately documented rescored view are both retained. ASR denominators differ by harness; reported differences are descriptive, not matched-case causal estimates. Rescoring does not create new observations.
| Case | Harness | Surface | Technique | Modality | Objective | Outcome |
|---|
Inspect the evidence
Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Prompt text is withheld in this restricted evidence view.
Open scored results ↓Inspect the evidence