Jailbreak outcomes can persist and diverge after safety feedback

Recent research reports that identical safety feedback can produce rescue, persistent unsafe tool execution, or collateral over-refusal in tool agents. Late-layer representations reportedly predict these outcomes, motivating tests of post-jailbreak persistence, feedback sensitivity, repeated tool calls, and causal runtime indicators rather than single-turn refusal rates. Practical generalization and defensive deployment value remain to be established.