Directional Jailbreak Detection on WildJailbreak (Safe) × AdvBench (Harmful)
1AUROC (mono)Qwen3-8B
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| Qwen3-8BProbe Layer=L25, Relative Depth=~69%, Total Layers=36, Direction=downward2026.06 | 1 | 0.901 | 0.915 | |
| Llama-3.1-8BProbe Layer=L22, Relative Depth=~69%, Total Layers=32, Direction=downward2026.06 | 0.999 | 0.858 | 0.86 | |
| Gemma-7bProbe Layer=L19, Relative Depth=~68%, Total Layers=28, Direction=upward2026.06 | 0.803 | 0.894 | 0.905 |