Add single-turn limitation to model card

README.md

@@ -234,6 +234,8 @@ Evaluated on 55 human-labeled vulnerability pairs (10 duplicates, 45 non-duplica
 - **Model size:** ~278M parameters with 768-dim embeddings. The ONNX model is ~1GB.
 - **Domain-specific:** Optimized for jailbreak/prompt injection duplicate detection. Performance on general semantic similarity tasks is not evaluated.
 
+- **Single-turn only:** This model was only trained on single-prompt jailbreaks and should not be used to process multi-turn conversations. In the future, we plan to release models that can handle multi-turn jailbreak scenarios.
+
 ## Citation
 
 ### BibTeX