The bitter lesson of misuse detection

Benchmarks commercial jailbreak-detection supervisors (BELLS), finding them weak and that simply prompting frontier LLMs to classify harmfulness works better, though those models often still answer harmful queries they flag.