Output Constraints as Attack Surface: Exploiting Structured Generation to Bypass LLM Safety Mechanisms

Open in new window