encoding-based attack

What specific encoded jailbreak techniques did the 2025 'controlled‑release prompting' paper use to bypass production model guards?

The describes an that hides malicious instructions inside systematically transformed text — essentially teaching models a reversible cipher (bijection) and then “releasing” the harmful payload in a fo...