When Choices Become Risks: Safety Failures of Large Language Models under Multiple-Choice Constraints

We identify and systematically characterize a class of task-structural alignment failures in large language models (LLMs): even when the harmful intent remains unchanged, changing the task presentation and output constraints can substantially alter model safety behavior. Specifically, when a harmful