Red-team strategy

Persuasive Adversarial Prompts (PAP)

persuasive-adversarial

Reframes the objective using social-science persuasion techniques (evidence-based, logical appeal, expert endorsement, social proof, framing, storytelling, misrepresentation, emotional appeal) rather than encoding — the harmful intent stays in plain language but is wrapped in rhetoric that nudges an aligned model toward compliance (Zeng et al. 2401.06373). Broader than authority-injection (one technique) and foot-in-the-door (commitment, multi-turn).

YAML config

evalguard.config.yaml

redteam:
  strategies:
    - persuasive-adversarial

CLI

bash

# "persuasive-adversarial" is layered onto attacks during red-team scans.
# List every available encoding/obfuscation strategy:
evalguard list strategies

Combine with attack plugins to generate adversarial payloads. The strategy wraps each base payload before it's sent to your target, testing whether the model decodes / unwraps the transform and follows the embedded instruction.