ResearchBenchmarksDirect Attack Security on PurpleDirect Attack Security on PurpleFollow98.25Direct ASRVanilla89.004491.404793.80596.2053May 12, 2026Evaluation resultsMethodMethodLinksDirect ASRVanillaBase Model=Qwen3-4BBase Model=Qwen3-4B2026.0598.25VanillaBase Model=Qwen2.5-7BBase Model=Qwen2.5-7B2026.0595.67StreamBase Model=Qwen3-4BBase Model=Qwen3-4B2026.0592.51StreamBase Model=Qwen2.5-7BBase Model=Qwen2.5-7B2026.0589.36