Multi-Step Inducement Attack Chain

When an attacker advances through dozens of incremental conversational turns, each escalating only slightly from the last; due to unmitigated control gaps, judged turn by turn, the system finds every request reasonable, and ultimately produces content that was explicitly prohibited, triggering compliance exposure and operational reputational costs.