Add single-turn limitation to model card

README.md

@@ -235,6 +235,8 @@ Evaluated on 55 human-labeled vulnerability pairs (10 duplicates, 45 non-duplica
 - **Model size:** ~560M parameters with 1024-dim embeddings. The ONNX model is ~2.1GB.
 - **Domain-specific:** Optimized for jailbreak/prompt injection duplicate detection. Performance on general semantic similarity tasks is not evaluated.
 
+- **Single-turn only:** This model was only trained on single-prompt jailbreaks and should not be used to process multi-turn conversations. In the future, we plan to release models that can handle multi-turn jailbreak scenarios.
+
 ## Citation
 
 ### BibTeX