Why it matters

Role-play remains effective vector. Understanding shapes defense.

Advertisement

The architecture

Set fictional frame.

Attach forbidden request in-fiction.

Model may comply within frame.

Role-play patternFictional framenovel / movieIn-frame requestharmful contentElicit outputin fiction wrapperIntent classifiers help; safety training tries to break frame
Role-play.
Advertisement

How it works end to end

Fictional wrapper.

Character speaks the payload.

Intent classifier + refusal training.