Why it matters

Moderation is only as good as its bypass resistance. Understanding techniques enables better filters.

Advertisement

The architecture

Encoding: request harmful content in base64 or hex.

Indirection: 'describe as fictional scenario' or 'translate this'.

Bypass techniquesEncoding tricksbase64/hexIndirectionfictional framingFilter weakness exploitgaps in coverageLayered filters (multiple models + rules) resist bypass better than single
Common bypasses.
Advertisement

How it works end to end

Multi-turn: build up harmful context across turns; filter examines single messages.

Filter model gaming: adversarial prompts designed for filter model.

Defenses: layered filters, cross-turn context in filter, red-team continuously.