If you're building anything with LLMs right now, you need to understand a class of prompt injection that your safety filters almost certainly aren't catching. It's called identity-framing, and a recent example dubbed "The Gay Jailbreak" has been making the rounds on Hacker News and GitHub, demonstrating just how fragile alignment-based safety can be.

I've spent the last few months building moderation layers for an AI-powered app, and this one genuinely caught me off guard.

The Problem: Conflicting Safety Objectives

Modern LLMs are trained with multiple safety objectives that can contradict each other. At a high level, the model is told to:

Be helpful and follow user instructions

Refuse harmful or dangerous requests

Avoid discrimination against marginalized groups

Be sensitive to identity-related topics

The identity-framing jailbreak exploits the tension between objectives 2 and 3 .…