Test content policy bypasses - Attempt to access restricted functionality - Try to make the LLM generate harmful or unauthorized content - Test for information disclosure from training data