M3 Framework for Multi-Turn LLM Jailbreaking via MDP

M3 formalizes multi-turn red-teaming as a finite-horizon Markov Decision Process using an attacker LLM and a state LLM. The framework improves Attack Success Rates by up to 53% over existing methods across six target models in black-box settings.