A 1-billion-parameter adversary learns to jailbreak a frozen 8-billion-parameter victim over 20 rounds. 6 episodes showing the adversary's evolution from accidents to strategy.
Animation Complete
Peak ASR: 42.0% at round 15. The 8B adversary learned real jailbreak strategies against the 3B victim.