$M^3$: A Multi-LLM System for Multi-Turn Jailbreaking as a Markov Decision Process
An automated red-teaming framework is introduced that formalizes multi-turn jailbreaking as a finite-horizon Markov Decision Process (MDP) without relying on predefined risk taxonomy, providing a scalable and principled framework for multi-turn red-teaming and safety evaluation.