Not the Same Protector: Deployment-Dependent Protective Intervention in LLMs
Results show that protective intervention is sensitive to the surface through which a request arrives, that this sensitivity is detectable using a simple protective coding scheme, and that it is not explained by turn length alone.