← All Labs
🛡 AI HACKING ADVANCED +145 XP · +65 no-hint bonus

AI Output Schema Bypass — Valid JSON That Violates Real Constraints

ApprovalBot reviews expense reports. It returns a JSON verdict with fields {approved: bool, amount: number, reason: string}. The backend uses JSON schema validation: types must match, required fields must be present. The schema does NOT validate semantic constraints — there's no max amount, no allowed-reason list, no consistency check between approved and amount. Craft an expense report that gets ApprovalBot to emit JSON that passes the schema but violates the real business rules.

https://bookshop.local/search