OptionalattackOptionaldetectUse pattern-based refusal detection to skip LLM scorer on obvious refusals. Default true.
OptionalencodingSingle-turn encoders used when injectionProbability > 0.
OptionalgoatOverride the GOAT semantic catalogue (the attacker's per-turn choices).
OptionalinjectionProbability (0.0-1.0) of applying a random encoding technique per turn. Default 0.0 (off).
OptionalmaxMaximum number of hard-refusal backtracks allowed per run. When
omitted, scales with totalTurns as max(1, floor(totalTurns / 3)) —
so a 30-turn run gets 10, a 5-turn run gets 1. Each backtrack
consumes a turn from the budget. Set explicitly to override.
OptionalmaxOptionalmetapromptOptionalmetapromptSeparate temperature for metaprompt/scoring calls. Defaults to temperature.
OptionalmetapromptOptionalmodelOptionalscoreScore target responses each turn to feed back into the attacker. Default true.
OptionalsuccessConsecutive turns >= threshold before triggering early exit. Default 2.
OptionalsuccessScore threshold (0-10) for early exit. Default 9. Set to undefined to disable.
OptionaltechniquesList of AttackTechnique instances to sample from. Defaults to all built-ins.
OptionaltemperatureOptionaltotal
Configuration for redTeamGoat.
Inherits all options from CrescendoConfig. The
redTeamGoatfactory setstotalTurnsto 30 by default.metapromptTemplateis accepted but ignored — GOAT does not pre-generate an attack plan (paper fidelity; see GoatStrategy.needsMetapromptPlan).Two
*techniquesfields live on this config and they mean different things:goatTechniques— override the GOAT semantic catalogue (the list the attacker LLM picks from each turn). Accepts GoatTechnique. Defaults to the 7-technique paper catalogue.encodingTechniques— single-turn Base64/ROT13/... encoders used byinjectionProbability. Accepts AttackTechnique.techniques— deprecated alias forencodingTechniques; keeps the inheritedCrescendoConfig.techniquesfield working with a warning.