EPAM：2025年大语言模型（LLM）的自动化越狱白皮书（英文版）

In this white paper, we evaluate two existing frameworks — tree-of-attack with pruning (TAP) and Declarative Self‑Improving Python (DSPy) — that approach this problem from different angles. We tested both frameworks in practical experiments to measure their effectiveness and identify their limitations and analyzed the results.