Jailbreaks use role-play, hypothetical framing, obfuscated text or very long conversations to slip past a model’s refusal training. Developers patch known techniques and run red-teaming exercises to find new ones.
Unlike prompt injection, which hides instructions in content the model reads, a jailbreak is typically attempted by the user directly.