MHJ

We compile successful jailbreaks into the Multi-Turn Human Jailbreaks (MHJ) dataset, consisting of 2,912 prompts across 537 multi-turn conversations. We include relevant metadata for each submission, including design choice comments from each red teamer for their jailbreak. The resulting attack success rate (ASR) of our human red teaming is shown as follows.