Energy Landscape Analysis Explains Diffusion Language Model Jailbreaks

Jailbreaks in diffusion-based LLMs succeed by either obscuring safety disposition at initialization or intervening mid-trajectory to bypass denoising energy barriers. The authors propose three training-free detection signals based on initial logit distributions and trajectory velocity to identify these attacks.