Persona-Conditioned Adversarial Prompting (PCAP): Multi-Identity Red-Teaming for Enhanced Adversarial Prompt Discovery

Abstract

Existing automated red-teaming pipelines often miss attacks that depend on attacker identity, framing, or multi-turn tactics. This under-coverage underestimates real-world risk. We introduce Persona-Conditioned Adversarial Prompting (PCAP), which conditions adversarial search on attacker personas and strategy cards and runs parallel persona-conditioned beam searches to discover diverse, transferable jailbreaks. PCAP is orthogonal to the underlying search algorithm and substantially increases att

Categories

Framework mappings

Suggested from the entry's categories.

@misc{morasso2026personaconditioneda,
  title = {{Persona-Conditioned Adversarial Prompting (PCAP): Multi-Identity Red-Teaming for Enhanced Adversarial Prompt Discovery}},
  author = {Cristian Morasso and Anisa Halimi and Muhammad Zaid Hameed and Douglas Leith},
  year = {2026},
  month = may,
  eprint = {2605.12565},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2605.12565}
}