SARA limits attack success rate to no more than 0.63% across four primary evaluation settings while maintaining competitive task utility

SARA limits ASR to no more than \(0.63\%\) across four primary evaluation settings while maintaining competitive task utility

http://arxiv.org/abs/2608.27146v1