[Feb 2026] Boundary Point Jailbreaking of Black-Box LLMs

Recently, defenders have developed classifier-based systems that have survived thousands of hours of human red teaming. BPJ is fully black-box and uses only a single bit of information per query: whether or not the classifier flags the interaction.

June 19, 2026