{"total":25,"rows":[{"id":"2507.11878","title":"LLMs Encode Harmfulness and Refusal Separately","created":"2025-07-16","cited_by_count":88,"area":"safety"},{"id":"2506.07022","title":"AlphaSteer: Learning Refusal Steering with Principled Null-Space Constraint","created":"2025-06-08","cited_by_count":49,"area":"safety"},{"id":"2509.09708","title":"Beyond I'm Sorry, I Can't: Dissecting Large Language Model Refusal","created":"2025-09-07","cited_by_count":19,"area":"safety"},{"id":"2603.24543","title":"Analysing the Safety Pitfalls of Steering Vectors","created":"2026-03-25","cited_by_count":10,"area":"safety"},{"id":"2511.04316","title":"AdversariaLLM: A Unified and Modular Toolbox for LLM Robustness Research","created":"2025-11-06","cited_by_count":6,"area":"safety"},{"id":"2506.15751","title":"Sysformer: Safeguarding Frozen Large Language Models with Adaptive System Prompts","created":"2025-06-18","cited_by_count":5,"area":"safety"},{"id":"2603.22061","title":"On the Failure of Topic-Matched Contrast Baselines in Multi-Directional Refusal Abliteration","created":"2026-03-23","cited_by_count":3,"area":"safety"},{"id":"2605.12726","title":"Before the Last Token: Diagnosing Final-Token Safety Probe Failures","created":"2026-05-12","cited_by_count":3,"area":"safety"},{"id":"2607.13075","title":"The Entanglement Wall: Activation-Space Probes as Risk Detectors, Not Context Adjudicators","created":"2026-07-12","cited_by_count":2,"area":"safety"},{"id":"2512.06655","title":"Graph-Regularized Sparse Autoencoders for LLM Safety Steering","created":"2025-12-07","cited_by_count":1,"area":"safety"},{"id":"2609.16204","title":"Decoy Direction Optimization: A Post-Hoc Defense Against LLM Abliteration","created":"2026-09-14","cited_by_count":1,"area":"safety"},{"id":"2601.15801","title":"Attributing and Exploiting Safety Vectors through Global Optimization in Large Language Models","created":"2026-01-22","cited_by_count":0,"area":"safety"},{"id":"2605.00123","title":"Minimal, Local, Causal Explanations for Jailbreak Success in Large Language Models","created":"2026-04-30","cited_by_count":0,"area":"safety"},{"id":"2605.02958","title":"Tracing the Dynamics of Refusal: Exploiting Latent Refusal Trajectories for Robust Jailbreak Detection","created":"2026-05-02","cited_by_count":0,"area":"safety"},{"id":"2605.14347","title":"Exemplar Partitioning for Mechanistic Interpretability","created":"2026-05-14","cited_by_count":0,"area":"safety"},{"id":"2605.17173","title":"Why Do Safety Guardrails Degrade Across Languages?","created":"2026-05-16","cited_by_count":0,"area":"safety"},{"id":"2605.24535","title":"Steering Beyond the Support: Adversarial Training on Unsupervised Jailbroken Activation Simulation","created":"2026-05-23","cited_by_count":0,"area":"safety"},{"id":"2608.25390","title":"Refusal geometry reflects refusal training: diverse refusal prefixes can raise stable rank and weaken refusal vector ablation attacks","created":"2026-08-26","cited_by_count":0,"area":"safety"},{"id":"2608.30585","title":"The Safety Relay in Roleplay Jailbreaks: A Component-Resolved Causal Analysis of Harm Recognition and Refusal","created":"2026-08-31","cited_by_count":0,"area":"safety"},{"id":"2609.05797","title":"Safety Monitors Mostly Catch What the Model Already Refuses","created":"2026-09-05","cited_by_count":0,"area":"safety"},{"id":"2609.14861","title":"Semantic Fibers and Cross-Gram Interference: A Calculus of Safety Drift in Overcomplete Representations","created":"2026-09-14","cited_by_count":0,"area":"safety"},{"id":"2609.32116","title":"Escaping Alignment: A Physical Trap Model of Best-of-N Jailbreaking","created":"2026-09-26","cited_by_count":0,"area":"safety"},{"id":"2610.00348","title":"Removing the NEEDLE in the Haystack: Backdoor Removal in LLMs via Weight Orthogonalisation","created":"2026-09-29","cited_by_count":0,"area":"safety"},{"id":"2610.04245","title":"On the Steering Dimensionality of Refusal in Language Models","created":"2026-10-03","cited_by_count":0,"area":"safety"},{"id":"2610.07125","title":"Jailbreaking Open-Weight LLMs via Random Embedding Perturbations","created":"2026-10-05","cited_by_count":0,"area":"safety"}],"next_cursor":null}