Layered LLM Defenses as an Ensemble: Access Tiers, Inference Cost, and the Measured Failure Correlation Between Defense Layers arxiv.org
Do stacked LLM defenses fail independently? This paper measures positive correlation across 7 layers, so the product bound lies.