SOURCE-LINKED INTELLIGENCE

Divide, Consult, Conquer: Capability Laundering Through Aligned LLMs

arXiv · AI, language, vision and robotics · article · Sep 14, 2026 · UTC

Language model safety is typically evaluated one interaction at a time. We show that a weaker, unaligned model can split a harmful task into benign-looking subproblems, consult a stronger aligned model independently on each, and combine the answers locally. We call this attack capability laundering. Unlike a jailbreak, no single response is a harmful task. We measure consultation-aided uplift using tasks that a raw frontier model solves, the aligned frontier refuses, and the unassisted orchestrator fails. We evaluate GPT-5.5, Claude Opus 4.8, and Grok-4.3 as consultants to four local orchestra

Read original source ↗ Open in workspace

recordType

paper

region

Global