Output Emoji-Substitution Hijack of the Response - ATR-2026-01902 (a09d25ba-983a-5b1a-b074-777d2a607a1d)
Detects indirect-injection instructions that force the agent to replace its response words with emojis (full or keyword substitution), a lossy-encoding evasion of output content checks. Anchored to the output target to avoid firing on legitimate 'add an emoji' formatting requests.