Chen-Kai Wu

Poisoned into Action: Context Attacks on Typed Decision Workflows

Typed decision interfaces restrict models to predefined actions, yet schema-valid choices can still trigger policy-violating state changes. Evaluating context poisoning thus requires connecting model decisions to execution outcomes while accounting for legitimate automation retained by defenses. We introduce an executi...