Keep pulling the thread on Jared Kaplan.
During over 3,000 estimated hours of red teaming, no universal jailbreak was found that could extract information from an early Constitutional Classifier-guarded LLM at a similar level of detail to an unguarded model.
Enhanced Constitutional Classifiers demonstrated robust defense against held-out, domain-specific jailbreaks in automated evaluations.
Constitutional Classifiers cause an absolute increase of 0.38% in production-traffic refusals.