New arXiv paper introduces GUISE benchmark and AXIS defense for narrative-wrapping jailbreaks
An arXiv preprint (arXiv:2610.11005v1) measures how role-play or narrative wrappers bypass safety refusals across languages and registers, reporting attack success rates on Qwen3-1.7B of 89.4% (English), 93.0% (modern Chinese) and 95.7% (Classical Chinese). The paper releases GUISE, a cross-language benchmark of parallel harmful/benign requests and held-out wrapper types, and proposes AXIS—a defense combining preference optimization, a rotation objective to align harmful-request representations with the refusal direction, and a commitment objective—which achieves the best combined safety/usability scores on Qwen3-1.7B, Qwen3-4B and GLM-4-9B among compared methods.