Siyu Chen
Author directoryOther people with similar names: Siyu Chen, Siyu Chen, Siyu Chen
Unverified author pages with similar names: Siyu Chen
2026
Before the Script, Set the Stage: How Worldview Simulation Amplifies Psychologically Grounded Persuasion in Multi-Turn Jailbreaking
Siyu Chen | Haoran Wang | Xiaojian Li | Yao Huang | Yinpeng Dong | Wei Xu
Findings of the Association for Computational Linguistics: EMNLP 2026
Siyu Chen | Haoran Wang | Xiaojian Li | Yao Huang | Yinpeng Dong | Wei Xu
Findings of the Association for Computational Linguistics: EMNLP 2026
Multi-turn jailbreak attacks demonstrate that harmful intent can be distributed across dialogue, yet existing methods obscure what conversational mechanisms drive vulnerability. We introduce Blueprint, a safety-evaluation framework that separates a factorized social-influence strategy space from WorldviewSim, a cross-turn situational context module. Monte Carlo Tree Search optimizes turn-level combinations of 18 theory-grounded influence factors across a four-turn trajectory. Across six frontier models, Blueprint achieves near-ceiling attack success rates on major open-weight and proprietary models, while requiring the fewest average queries (2.46). The resulting trajectories further reveal model-specific vulnerability among resistant targets: each responds to distinct influence factors and strategy transitions, yet all share a common recovery pathway. Specifically, shifting toward concrete, executable task framing consistently escapes hard-refusal states. Ablations confirm that operational cues matter most: making requests actionable has the largest impact, gain framing is unusually potent, and some legitimacy appeals can backfire. These findings suggest that robust multi-turn safety requires monitoring not only harmful content, but also how dialogue state makes unsafe requests appear concrete and locally executable. The code is open-sourced at: https://github.com/charlottec1583/Blueprint.