Intent Recovery Rate Improves LLM Safety Evaluation Accuracy

This research introduces Operative Understanding Rate (UR) to supplement Attack Success Rate (ASR) in safety benchmarks. Measuring UR allows evaluators to distinguish between models that correctly refuse harmful tasks and those that simply fail to engage with the prompt intent.