Poisoned into Action: Context Attacks on Typed Decision Workflows

Chenkai Wu, Xing Chang, Jun Yan

Typed decision interfaces restrict models to predefined actions, yet schema-valid choices can still trigger policy-violating state changes. Evaluating context poisoning thus requir…