Output Encoding Hijack — Cipher / Base-N / Symbol Substitution of the Response - ATR-2026-01900 (67e2b83c-7c4b-5634-ad9e-2e1dd4349e64)
Detects indirect-injection instructions that force the agent to encode its entire response (Caesar/substitution/monoalphabetic cipher, Base16/32/58/64/85, or letter-to-number / letter-to-symbol substitution). Encoding the output is a covert channel that defeats downstream output content moderation. Anchored to the output target ('your response/answer/reply') to avoid firing on legitimate encoding requests.