#obfuscation

Encoding and Obfuscation Jailbreaks: The Filter-Model Gap

Content filters typically operate on decoded, normalized text. LLMs process tokens, not text. The gap between these two layers is an attack surface that