Fair ASR: Re-Evaluating Black-Box Jailbreaks under Shared Target-Call Budgets
ReCode is introduced, a compositional budget-efficient attack that combines desensitization rewriting with two effective low-cost primitives identified by Fair-ASR, to provide a comparable evaluation basis for black-box jailbreak attacks under shared target-call budgets B.