Does DSPy prompt optimization weaken adversarial robustness?

Roughly a 10-minute read. Apache-2.0 benchmark + raw data at the end. Update (2026-06-26): a 3-seed sanity check changes one finding in this post. After publishing, I re-ran the same workspace cells with two additional optimizer seeds and aggregated across all three. The "BootstrapFewShot > MIPROv2 > GEPA" ordering reported further down does not hold across seeds. Averaged over three seeds, BootstrapFewShot is actually the lowest security score on the important_instructions attack (0.600), and…