LLM Jailbreaking via Many-Shot Prompting

How prepending hundreds of synthetic compliance examples to a long-context prompt erodes safety training — the mechanics, empirical results, and why this is structurally difficult to fix.