Our work on structured output as a control-plane vulnerability in LLM jailbreaking accepted to CCS 2026. May 2026.