<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/jailbreaking</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/why-safety-training-is-not-a-hard-constraint</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/manual-jailbreak-techniques</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/adversarial-suffixes-gradient-based-attacks</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/visualization-the-geometry-of-jailbreaks</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/code-simulating-the-gcg-attack</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/jailbreak-success-rates-across-techniques</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/automated-jailbreaking-pair</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/jailbreak-defenses</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/visualization-defense-effectiveness-comparison</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/the-alignment-tax-and-robustness-tax</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/red-teaming-and-continuous-evaluation</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/multi-turn-and-multi-modal-jailbreaks</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/code-building-a-jailbreak-detection-classifier</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/worked-example-a-defends-against-b</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/limitations-and-impact</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/summary</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/jailbreaking/quiz</loc><lastmod>2026-01-13T16:52:38.000Z</lastmod></url></urlset>