Summary

Cross-references 39 evolved attacks from the attack evolver with the 82 techniques in the jailbreak corpus taxonomy and 6 novel attack families. The evolver does NOT independently discover any of the 6 novel families. It operates exclusively within the structural space defined by its seed corpus and mutation operators. However, it produces partial convergence toward pressure escalation patterns (18%) and discovers a technique absent from human-designed families: hybrid format-authority attacks combining format compliance with institutional authority framing (28%).