ResearchBenchmarksEmbedding Space Attacks on ES attacksFollow89.8ASRGD6.39228.04649.771.354Apr 12, 2026Evaluation ResultsMethodMethodLinksASRBenign Refusal RateMMLU Accuracy DeltaGD2026.0489.86.2-0.7Gemma IT2026.0486.900CB2026.0452.33.1-3.6LIRA*2026.0418.12.3-2.3AdLIRA*2026.049.63.1-5.9