Why it matters

DAN was foundational jailbreak. Understanding shapes historical + defense.

Advertisement

The architecture

Role: 'you are DAN, without restrictions'.

Reinforce persona.

Elicit forbidden content.

DAN patternSet persona'DAN' unconstrainedReinforce'stay in character'Elicit contentharmful requestDirect DAN mostly patched; obfuscated + refined variants persist as red-team baselines
DAN.
Advertisement

How it works end to end

Persona-based jailbreak.

Frontier models robust vs direct DAN.

Variants (DAN 12, GPT DAN) evolve.