Meta's Muse Spark 1.1 publishes an 11.2% multi-turn attack success rate that defenses only cut to 6.9%.

Shipped today, giving Meta AI calendar access, guided research, daily briefings and recurring task automation, with the model deciding when to write a script versus drive on-screen controls. The Poly-Guard number is the one builders should read: roughly 1 in 14 multi-turn attacks still lands after defenses. Meta's own mitigation guidance (strict tool allowlists, workspace isolation, application-level protections) is effectively an admission. That's the threat model you inherit if you deploy on it. (The Enterprise)