controlled-release prompting paper

What specific encoded jailbreak techniques did the 2025 'controlled‑release prompting' paper use to bypass production model guards?

The describes an that hides malicious instructions inside systematically transformed text — essentially teaching models a reversible cipher (bijection) and then “releasing” the harmful payload in a fo...