Incomplete Prompt Jailbreaks Let LLMs Slip Past Safety Until Sentence Ends
Researchers show that open-weight LLMs can be coaxed into harmful continuations by feeding incomplete prompts that exploit sentence‑completion behavior. The models defer refusal until the sentence finishes, making existing guard‑training ineffective. Targeting specific termination and continuation neurons offers a pathway to tighter defenses.