Content Safety Detection on WildJailbreak (F1, ASR)
96.6F1 Scoreprompt–response verification framework
Evaluation results
| Method | Links | ||
|---|---|---|---|
| prompt–response verification framework2026.06 | 96.6 | 3.4 | |
| prompt–response verification framework2026.06 | 96.5 | 3.5 | |
| AutoDefense / SelfDefendType=Strongest Applicable Baseline2026.06 | 93.6 | — | |
| AutoDefense / SelfDefendType=Strongest Applicable Baseline2026.06 | 92.8 | — |