Jailbreak Attack on 100 Harmful Prompts
55ASR (K=2)PAST2HARM
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| PAST2HARMModel=SDXL, Strategy=Adaptive PT2026.05 | 55 | 74 | 83 | 88 | |
| Only Past TenseModel=SDXL2026.05 | 41 | 58 | 66 | 71 | |
| PAST2HARMModel=Gemini Nano Banana Pro, Strategy=Adaptive PT2026.05 | 38 | 55 | 64 | 69 | |
| Only Past TenseModel=Gemini Nano Banana Pro2026.05 | 28 | 42 | 51 | 57 | |
| PAST2HARMModel=GPT-Image-2, Strategy=Adaptive PT2026.05 | 26 | 41 | 50 | 56 | |
| Future TenseModel=SDXL2026.05 | 22 | 31 | 37 | 40 | |
| Only Past TenseModel=GPT-Image-22026.05 | 18 | 29 | 36 | 41 | |
| Future TenseModel=Gemini Nano Banana Pro2026.05 | 14 | 21 | 26 | 30 | |
| Future TenseModel=GPT-Image-22026.05 | 8 | 13 | 17 | 20 |