Research questionHow can safety systems detect and prevent harmful behavior when multi-turn dialogue makes requests seem executable?Multi-turn jailbreaks can distribute harmful intent across several exchanges, making the conversation’s evolving state as important as any individual request. Requests that become more concrete or actionable may be interpreted differently from initially refused requests.