Typically safeguards are also another, smaller model that only detects the forbidden stuff. That’s why Claude Mythos would reject when you ask it to find bugs in your code, but you could “jailbreak” it by asking it by asking it to fix the bugs instead.
Typically safeguards are also another, smaller model that only detects the forbidden stuff. That’s why Claude Mythos would reject when you ask it to find bugs in your code, but you could “jailbreak” it by asking it by asking it to fix the bugs instead.
Its also why you can occasionally fool the safety rails by having the LLM answer in rhyme, or having it talk like a pirate or caveman.
Fun fact: having it talk like a caveman also reduced your output token use, despite actually costing more tokens.