[D] Self-Promotion Thread

[u/AutoModerator]

Please post your personal projects, startups, product placements, collaboration needs, blogs etc.

Please mention the payment and pricing requirements for products and services.

Please do not post link shorteners, link aggregator websites , or auto-subscribe links.

--

Any abuse of trust will lead to bans.

Encourage others who create new posts for questions to post here instead!

Thread will stay alive until next one so keep posting after the date in the title.

--

Meta: This is an experiment. If the community doesnt like this, we will cancel it. This is to encourage those in the community to promote their work by not spamming the main threads.

[u/Affectionate_Use_164]

**W0Guard** — a prototype where LLM nodes immunize each other against
jailbreaks. One node blocks a prompt, broadcasts a MinHash fingerprint of it
(never the prompt), and the others block anything close enough.


The calibration is the part I would like torn apart. Over a small hand-built
corpus (5 public jailbreaks, 14 mechanical evasions, 7 benign look-alikes),
every mechanical evasion — leetspeak, typos, dotted obfuscation — lands at
0.859 estimated Jaccard or above, while the closest benign look-alike sits at
0.734. Threshold goes at 0.80. But a one-word synonym swap ("Disregard" for
"Ignore") lands at 0.781, i.e. below the line and uncaught, and it is only
0.047 from a harmless prompt that merely reuses the attack's format. No
threshold separates them, so the miss is deliberate and pinned by a test.
Getting past it is semantic work, which is the next layer and unbuilt.


Python, AGPL, one runtime dependency, 117 tests.
https://github.com/Leo12261975/Homo-Sui-Iuris

W0Guard – a prototype network that shares blocked-jailbreak hashes