PAP

Persuasive Adversarial Prompts using persuasion-technique taxonomies.

Adaptive. Searches: it reads the target's replies and refines its prompts, which is why it needs an attacker model.

A sweep over persuasion techniques, one request each.

Helper models

Models this attack drives, configured under its roles. Each one is a ModelConfig.

Role	Kind	Needed	What it does
attacker	chat model	required	Rewrites the goal once per persuasion technique (logical appeal, authority, …).

Parameters

Settings for the algorithm itself, written under the attack's parameters. Anything left out keeps its default.

Field	Type	Default	Description
techniques	string or list of string	top5	"top5", "all", or explicit technique names, tried in order.
max_techniques	integer (>= 0)	0	Upper bound on techniques tried per goal; 0 tries all of them.

In a campaign file

attacks:
- name: pap
  roles:
    attacker:
      name: llama3.2
      connection:
        provider: ollama
        type: OLLAMA

Needs a helper model

This attack cannot run without attacker. A campaign that leaves it out fails to resolve, before anything is attacked.