最新资讯
dev.to 在信任 AI 生成的测试用例前,如何逐条复核 unite.ai Franklin Templeton 构建 AI 研究工作流以揭示风险 techxplore.com AI 助力寻找更优的钛合金 3D 打印工艺参数 engadget.com Perplexity 推出“teammates”日常工作任务 AI agent computerworld.com 别提数据中心:OpenAI 改称“compute campuses” theguardian.com 俄美试图阻止就自主武器制定具有约束力的规则 bloomberg.com Nvidia 加强东南亚芯片追踪以打击走私 thestack.technology 模型路由需求升温,Agent Router 推出开源替代方案 www.youtube.com Google DeepMind 的 Philipp Schmid:AI 同事需要具备的七个要素 unite.ai Cashfree 为 AI Agent 的托管结账加入 WebMCP 工具 dev.to 我们在 DolphinBench 上测试记忆检索:纯关键词搜索暴露了自身回归 dev.to 别再把 Agent 写成 while 循环,把它建模为状态机
多元动态
登录 注册
大模型 arxiv.org ·

大型语言模型中的拒绝行为远不止一个方向

原文 我的收藏

该论文指出,此前认为 LLM 拒绝行为由单一方向中介的观点并不完整:在不同拒绝与不遵从类别上,拒绝行为对应激活空间中几何上不同的方向;但沿任一拒绝相关方向进行激活引导,都会产生几乎相同的拒绝—过度拒绝权衡,相当于一个共享的一维控制旋钮,因此不同方向主要影响的是“如何拒绝”而非“是否拒绝”。作者用稀疏自编码器揭示出结构化的拒绝内部表示——可复用的共享拒绝潜变量核心,加上风格与领域特定的潜变量;线性干预会把这一结构压缩为统一的行为控制,抹平不同拒绝类型间的机制差异。

AI推荐理由 arXiv 论文(v2,2026-09-15 修订),摘要明确给出可验证结论:拒绝行为在激活空间中对应多个几何上不同的方向,但沿任一拒绝相关方向做激活引导会产生几乎相同的拒绝—过度拒绝权衡,即充当共享的一维控制旋钮;作者用稀疏自编码器发现拒绝的内部表示由可复用的共享拒绝潜变量加风格/领域特定潜变量构成,线性干预会把该结构压平。这修正了“拒绝由单一方向中介”的既有说法,对可解释性与对齐/abliteration 研究有直接价值;局限是仅基于摘要,未提供实验规模与模型清单。

78

正文

Computer Science > Computation and Language arXiv:2602.02132 (cs) [Submitted on 2 Feb 2026 (v1), last revised 15 Sep 2026 (this version, v2)] Title:There Is More to Refusal in Large Language Models than a Single Direction Authors:Faaiz Joad, Majd Hawasly, Sabri Boughorbel, Nadir Durrani, Husrev Taha Sencar View a PDF of the paper titled There Is More to Refusal in Large Language Models than a Single Direction, by Faaiz Joad and Majd Hawasly and Sabri Boughorbel and Nadir Durrani and Husrev Taha Sencar View PDF HTML (experimental) Abstract:Prior work argues that refusal in large language models is mediated by a single direction, enabling steering and abliteration. We show that this account is incomplete: across diverse refusal and non-compliance categories, refusal behaviors correspond to geometrically distinct directions in activation space. Yet activation steering along any refusal-related direction produces nearly identical refusal--over-refusal trade-offs, acting as a shared one-dimensional control knob. Thus, different directions primarily affect not whether the model refuses, but how it refuses. Using sparse autoencoders, we uncover a structured internal representation of refusal: a reusable core of shared refusal latents supplemented by style- and domain-specific latents. Linear interventions collapse this structure into uniform behavioral control, flattening mechanistic differences across refusal types. Our results reconcile the apparent simplicity of refusal steering with the diversity of refusal behaviors, and clarify the limits of linear interpretability for aligned model behavior. Comments: Subjects: Computation and Language (cs.CL) Cite as: arXiv:2602.02132 [cs.CL] (or arXiv:2602.02132v2 [cs.CL] for this version) https://doi.org/10.48550/arXiv.2602.02132 Focus to learn more arXiv-issued DOI via DataCite Submission history From: Faaiz Joad [view email] [v1] Mon, 2 Feb 2026 14:15:44 UTC (365 KB) [v2] Tue, 15 Sep 2026 08:32:48 UTC (4,650 KB) Full-text links: Access Paper: View a PDF of the paper titled There Is More to Refusal in Large Language Models than a Single Direction, by Faaiz Joad and Majd Hawasly and Sabri Boughorbel and Nadir Durrani and Husrev Taha Sencar View PDF HTML (experimental) TeX Source view license Current browse context: cs.CL new | recent | 2026-02 Change to browse by: cs References & Citations NASA ADS Google Scholar Semantic Scholar export BibTeX citation Loading... BibTeX formatted citation × loading... Data provided by: Bookmark Bibliographic Tools Bibliographic and Citation Tools Bibliographic Explorer Toggle Bibliographic Explorer (What is the Explorer?) Connected Papers Toggle Connected Papers (What is Connected Papers?) Litmaps Toggle Litmaps (What is Litmaps?) scite.ai Toggle scite Smart Citations (What are Smart Citations?) Code, Data, Media Code, Data and Media Associated with this Article alphaXiv Toggle alphaXiv (What is alphaXiv?) Links to Code Toggle CatalyzeX Code Finder for Papers (What is CatalyzeX?) DagsHub Toggle DagsHub (What is DagsHub?) GotitPub Toggle Gotit.pub (What is GotitPub?) Huggingface Toggle Hugging Face (What is Huggingface?) ScienceCast Toggle ScienceCast (What is ScienceCast?) Demos Demos Replicate Toggle Replicate (What is Replicate?) Spaces Toggle Hugging Face Spaces (What is Spaces?) Spaces Toggle TXYZ.AI (What is TXYZ.AI?) Related Papers Recommenders and Search Tools Link to Influence Flower Influence Flower (What are Influence Flowers?) Core recommender toggle CORE Recommender (What is CORE?) Author Venue Institution Topic About arXivLabs arXivLabs: experimental projects with community collaborators arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website. Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them. Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs. Which authors of this paper are endorsers? | Disable MathJax (What is MathJax?)

来源报道 · 1 篇 · 以下链接均前往原始媒体

aihot::arXiv - LLM 大型语言模型中的拒绝行为远不止一个方向 09-16 · 原文发布
← 返回精选动态 原文

更多内容