Safety evaluation against dynamic adversarial chains