mlsanityData to 7 Oct 2026

Refusal in LLMs is an Affine Function

arXiv 2411.09003 ↗First posted 13 Nov 2024cs.LG cs.CLcited by 26

Not on the map. Why?

Abstract (arXiv)

We propose affine concept editing (ACE) as an approach for steering language models' behavior by intervening directly in activations. We begin with an affine decomposition of model activation vectors and show that prior methods for steering model behavior correspond to subsets of terms of this decomposition. We then provide a derivation of ACE and use it to control refusal behavior on ten different models, including Llama 3 70B. ACE combines affine subspace projection and activation addition to reliably control the model's refusal responses across prompt types. We evaluate the results using LLM-based scoring on a collection of harmful and harmless prompts. Our experiments demonstrate that ACE consistently achieves more precise control over model behavior than existing methods and generalizes to models where directional ablation via affine subspace projection alone produces incoherent outputs. Code for reproducing our results is available at https://github.com/EleutherAI/steering-llama3 .

Key facts. Cited by 26 papers in the map (data through 7 Oct 2026). First posted on arXiv 13 Nov 2024.

Builds on

0 of 0 references.

No references here yet.

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 1; 2025: 10; 2026: 15.

26 papers.

Sort:

By area:

  1. 2025Understanding (Un)Reliability of Steering Vectors in Language Modelscited by 39
  2. 2025Refusal Direction is Universal Across Safety-Aligned Languagescited by 37
  3. 2025Localized Cultural Knowledge is Conserved and Controllable in Large Language Modelscited by 19
  4. 2025Robustly Improving LLM Fairness in Realistic Settings via Interpretabilitycited by 16
  5. 2025COSMIC: Generalized Refusal Direction Identification in LLM Activationscited by 15
  6. 2025Jailbreak Attack Initializations as Extractors of Compliance Directionscited by 10
  7. 2025RepIt: Steering Language Models with Concept-Specific Refusal Vectorscited by 10
  8. 2024Emergence and Effectiveness of Task Vectors in In-Context Learning: An Encoder Decoder Perspectivecited by 9
  9. 2025Towards Understanding and Improving Refusal in Compressed Models via Mechanistic Interpretabilitycited by 6
  10. 2025In-Context Representation Hijackingcited by 5
  11. 2026Inference-Time Toxicity Mitigation in Protein Language Modelscited by 2
  12. 2026Locating and Controlling Implicit Personalization in Large Language Modelscited by 2
14 more
  1. 2026RefusalGuard: Geometry-Preserving Fine-Tuning for Safety in LLMscited by 1
  2. 2026Ablating Safety: Mechanisms for Removing Alignment in Language Models for Security Applicationscited by 1
  3. 2025Concept Concentration for Faithful Representation Interventioncited by 0
  4. 2026Linear Script Representations in Speech Foundation Models Enable Zero-Shot Transliterationcited by 0
  5. 2026Exemplar Partitioning for Mechanistic Interpretabilitycited by 0
  6. 2026Residual Paving: Diagnosing the Routing Bottleneck in Selective Refusal Editingcited by 0
  7. 2026Decomposing Refusal Steering in Mixture-of-Experts Modelscited by 0
  8. 2026Leveraging Association Context Retrieval in Knowledge Edit- ing to Build White-Box Attacks on LLMscited by 0
  9. 2026Controlling Refusal Behavior of LLMs via Stiefel-Constrained Rotation Steeringcited by 0
  10. 2026How Fragile Is Safety Alignment at Frontier Scale? A Single-Direction Attack on a 320B MoEcited by 0
  11. 2026A Survey on the Linear Representation Hypothesiscited by 0
  12. 2026Activation Flow: Manufacturing Activations for Steeringcited by 0
  13. 2026Controlling Speaking Rate in Autoregressive TTS via Activation Steeringcited by 0
  14. 2026Capturing In-Context Learning Dynamics with Task Operatorscited by 0