TY - RPRT TI - Bait-and-Recover: Poisoning Internal Refusal Signals to Defend LLMs against White-Box Editing Jailbreaks AU - Tian Gao AU - Zhipeng Xie AU - Yuhao Wu AU - Junhua Liu AU - Xin Fang PY - 2026 UR - https://arxiv.org/abs/2609.05794 ID - 2609.05794 ER -