feat: enhance chapter template with theoretical foundations, mechanistic explanations, and a dedicated research landscape section.

docs/templates/Chapter_Template.md

@@ -45,6 +45,27 @@ Traditional Approach vs AI-Powered Approach:
 - **Concept 2:** Clear definition and relevance to red teaming
 - **Concept 3:** Clear definition and relevance to red teaming
 
+### Theoretical Foundation
+
+**Why This Works (Model Behavior):**
+
+[Explain what properties of transformer architecture, training methodology, or input processing enable this attack/technique. Address:]
+
+- **Architectural Factor:** [What transformer component is exploited: attention, tokenization, embedding space, residual stream?]
+- **Training Artifact:** [What aspect of pretraining, fine-tuning, or RLHF creates this vulnerability?]
+- **Input Processing:** [How does the model's handling of tokens/context enable this?]
+
+**Foundational Research:**
+
+| Paper | Key Finding | Relevance |
+|-------|-------------|-----------||
+| [Author et al., Year] "[Title]" | [One-sentence finding] | [How it informs this chapter] |
+| [Author et al., Year] "[Title]" | [One-sentence finding] | [How it informs this chapter] |
+
+**What This Reveals About LLMs:**
+
+[2-3 sentences on broader implications for understanding model behavior]
+
 **Chapter Scope:**
 
 This chapter covers [list the major sections/topics], including practical code examples, detection methods, defense strategies, real-world case studies, and ethical considerations for authorized security testing.
@@ -75,6 +96,20 @@ Example:
 Attacker → [Action] → System Processes → [Result] → Victim Impacted
 ```
 
+**Mechanistic Explanation:**
+
+At the token/embedding level, this technique exploits:
+
+1. **Tokenization:** [How BPE/tokenization affects this technique]
+2. **Attention Dynamics:** [What happens in attention layers]
+3. **Hidden State Manipulation:** [How the residual stream is affected]
+
+**Research Basis:**
+
+- **Introduced by:** [Citation with link]
+- **Validated by:** [Follow-up citation]
+- **Open Questions:** [What remains unknown]
+
 ### [X].2.1 [Subtopic 1]
 
 [Detailed content about the subtopic. Use clear, professional language.]
@@ -245,6 +280,14 @@ print(f"Result: {result}")
 2. **Reason 2:** Explanation of why defenses fail
 3. **Reason 3:** Explanation of exploitation mechanics
 
+**Why This Code Works (Technical Deep-Dive):**
+
+This implementation succeeds because:
+
+1. **Model Behavior Exploited:** [Specific vulnerability]
+2. **Research Basis:** [Paper documenting this behavior]
+3. **Transferability:** [Does this work across models? Why/why not?]
+
 **Key Takeaways:**
 
 1. **Takeaway 1:** Specific insight about the technique
@@ -323,6 +366,18 @@ print(f"Result: {result}")
 
 [Explain how techniques can be chained or combined for greater impact]
 
+**Technique Interaction Analysis:**
+
+Why combining techniques amplifies effectiveness:
+
+- **Technique A + B:** [Mechanistic explanation of synergy]
+- **Research Support:** [Papers on attack composition]
+
+**Theoretical Limits:**
+
+- What would make this technique stop working?
+- What architectural changes would mitigate this?
+
 ---
 
 ## [X].5 [Detection Methods]
@@ -349,6 +404,14 @@ print(f"Result: {result}")
 - **Indicator 2:** What to look for and significance
 - **Indicator 3:** What to look for and significance
 
+**Detection Rationale:**
+
+Why this detection method works:
+
+- **Signal Exploited:** [What model behavior indicates attack]
+- **Interpretability Basis:** [Reference to mechanistic interpretability research]
+- **Limitations:** [What the detection cannot see and why]
+
 **Practical Detection Example:**
 
 ```python
@@ -484,9 +547,45 @@ security_settings:
     threshold: 0.8
 ```
 
+**Defense Mechanism Analysis:**
+
+Why this defense works (or fails):
+
+- **Training Dynamics:** [How this affects model learning]
+- **Alignment Research:** [Relevant RLHF/DPO/Constitutional AI papers]
+- **Known Bypasses:** [Research documenting defense limitations]
+
 ---
 
-## [X].7 [Case Studies / Real-World Examples]
+## [X].7 Research Landscape
+
+**Seminal Papers:**
+
+| Paper | Year | Venue | Contribution |
+|-------|------|-------|--------------||
+| [Title] | [Year] | [Venue] | [Key contribution] |
+| [Title] | [Year] | [Venue] | [Key contribution] |
+| [Title] | [Year] | [Venue] | [Key contribution] |
+
+**Evolution of Understanding:**
+
+[Timeline or narrative showing how research understanding developed]
+
+**Current Research Gaps:**
+
+1. [Open question with relevance to practitioners]
+2. [Open question with relevance to practitioners]
+3. [Open question with relevance to practitioners]
+
+**Recommended Reading:**
+
+- **[Paper 1]:** Best for understanding [aspect]
+- **[Paper 2]:** Best for understanding [aspect]
+- **[Paper 3]:** Best for understanding [aspect]
+
+---
+
+## [X].8 [Case Studies / Real-World Examples]
 
 ### Case Study 1: [Name/Description]
 
@@ -531,7 +630,7 @@ security_settings:
 
 ---
 
-## [X].8 [Ethical and Legal Considerations]
+## [X].9 [Ethical and Legal Considerations]
 
 **Legal Implications:**
 
@@ -582,7 +681,7 @@ After Testing:
 
 ---
 
-## [X].9 Conclusion
+## [X].10 Conclusion
 
 **Key Takeaways:**
 
@@ -686,6 +785,15 @@ TEMPLATE USAGE NOTES:
 9. Update checklists with chapter-specific items
 10. Use appropriate alert types (NOTE/TIP/IMPORTANT/WARNING/CAUTION)
 
+RESEARCH INTEGRATION REQUIREMENTS:
+11. Every technique must include "Why This Works" mechanistic explanation
+12. Minimum 3 academic citations per chapter (foundational + validation + recent)
+13. Connect detection/defense methods to interpretability research
+14. Include "Research Landscape" section with seminal papers
+15. Flag techniques lacking research basis as "Empirically Observed (Unverified)"
+16. Prefer peer-reviewed papers; mark preprints as [Preprint]
+17. Include arXiv/DOI links for all citations
+
 VISUAL ELEMENTS TO CONSIDER:
 - ASCII diagrams for attack flows
 - Comparison tables (Traditional vs AI-Powered)