Adversarial testing and robustness framework for AI models with 25 attacks (character/word/semantic perturbations, prompt injection, jailbreak, extraction, inversion), defenses (detection/filtering/sanitization), certified robustness metrics, and attack composition.