A 1-billion-parameter adversary learns to jailbreak a frozen 8-billion-parameter victim over 20 rounds. 6 episodes showing the adversary's evolution from accidents to strategy.
Animation Complete
Peak ASR: 49.5% at round 17. The 1B adversary learned real jailbreak strategies from scratch.