Structured Dual-Response Jailbreak with Command System - ATR-2026-00233 (240ef04e-fc0c-5648-9c90-86b51916ea67)
Detects sophisticated jailbreak attempts that establish a fictional unrestricted AI persona (like "UnleashedGPT", "DAN", etc.) combined with dual-response formatting requesting both normal and "unleashed" outputs. These attacks create structured command systems for ongoing safety bypass and often include detailed policy override instructions, constraint removal claims, and authority impersonation. The attack establishes a persistent jailbreak framework rather than a single harmful request. Pattern crystallized from garak probe atr:missed-sample showing structured persona-based bypass with command infrastructure.