h4rm3l
Composable decorator-program attack chaining multiple obfuscations.
Static. Builds its prompts up front and sends them. It drives no model of its own, so it is cheap and repeatable.
One request carrying the decorated goal.
Helper models
Models this attack drives, configured under its roles. Each one is a ModelConfig.
| Role | Kind | Needed | What it does |
|---|---|---|---|
decorator | chat model | optional | Optional. Model used by decorators that need an LLM, such as TranslateDecorator. Only needed when the program contains one. |
Parameters
Settings for the algorithm itself, written under the attack's parameters. Anything left out keeps its default.
| Field | Type | Default | Description |
|---|---|---|---|
program | string (at least 1) | IdentityDecorator() | The obfuscation program applied to the goal: a preset name such as refusal_suppression, base64_refusal_suppression or translate_zulu, or a program written in the h4rm3l decorator language. |
syntax_version | one of 1, 2 | 2 | Version of the h4rm3l program syntax the program is written in (1 or 2). |
In a campaign file
attacks:
- name: h4rm3l