Fair-ASR flips jailbreak rankings when you equalize target calls
A new evaluation protocol called Fair-ASR, introduced in a paper, equalizes target-call budgets across jailbreak attacks and finds that rankings of 11 representative attacks shift dramatically dependi…