Jailbreaks trick a model into producing content or actions its policies forbid — usually via roleplay, hypothetical framing, encoding, or persistent nudging. Model providers patch known jailbreaks; new ones surface constantly.
A production system cannot rely on model-side safety alone. Sensitive capabilities need external allow-lists, rate limits, and post-hoc classifiers.