mlsanityData to 7 Oct 2026

Head-Specific Intervention Can Induce Misaligned AI Coordination in Large Language Models

arXiv 2502.05945 ↗First posted 9 Feb 2025cs.CL cs.AIcited by 1

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

Robust alignment guardrails for large language models (LLMs) are becoming increasingly important with their widespread application. In contrast to previous studies, we demonstrate that inference-time activation interventions can bypass safety alignments and effectively steer model generations towards harmful AI coordination. Our method applies fine-grained interventions at specific attention heads, which we identify by probing each head in a simple binary choice task. We then show that interventions on these heads generalise to the open-ended generation setting, effectively circumventing safety guardrails. We demonstrate that intervening on a few attention heads is more effective than intervening on full layers or supervised fine-tuning. We further show that only a few example completions are needed to compute effective steering directions, which is an advantage over classical fine-tuning. We also demonstrate that applying interventions in the negative direction can prevent a common jailbreak attack. Our results suggest that, at the attention head level, activations encode fine-grained linearly separable behaviours. Practically, the approach offers a straightforward methodology to steer large language model behaviour, which could be extended to diverse domains beyond safety, requiring fine-grained control over the model output. The code and datasets for this study can be found on https://github.com/PaulDrm/targeted_intervention.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 14 of its 19 references that are in the map. First posted on arXiv 9 Feb 2025.

Builds on

14 of 19 references.

Closest ancestors · 2

Same direction, newest first

  1. 2024Refusal in Language Models Is Mediated by a Single Direction17 Jun
  2. 2023LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70B31 Oct

Other references · 12

  1. 2017Attention Is All You Needcited by 59,932
  2. 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 2,993
  3. 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,259
  4. 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,009
  5. 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
  6. 2023The Geometry of Truth: Emergent Linear Structure in Large Language Model Representations of True/False Datasetscited by 673
  7. 2024Adaptive Activation Steering: A Tuning-Free LLM Truthfulness Improvement Method for Diverse Hallucinations Categoriescited by 74
  8. 2023Improving Activation Steering in Language Models with Mean-Centringcited by 64
  9. 2024Semantics-Adaptive Activation Intervention for LLMs via Dynamic Steering Vectorscited by 61
  10. 2024From Yes-Men to Truth-Tellers: Addressing Sycophancy in Large Language Models with Pinpoint Tuningcited by 51
  11. 2023Will releasing the weights of future large language models grant widespread access to pandemic agents?cited by 25
  12. 2024LLMs in the Imaginarium: Tool Learning through Simulated Trial and Errorcited by 19

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2025Noise Injection Systemically Degrades Large Language Model Safety Guardrails
  2. 2025Safety Alignment Should Be Made More Than Just A Few Attention Heads
  3. 2024Towards Understanding Safety Alignment: A Mechanistic Perspective from Safety Neurons
  4. 2025Probing the Robustness of Large Language Models Safety to Latent Perturbations
  5. 2026Steering Safely or Off a Cliff? Rethinking Specificity and Robustness in Inference-Time Interventions
  6. 2026How Alignment Routes: Localizing, Scaling, and Controlling Policy Circuits in Language Models
  7. 2025Mitigating Over-Refusal in Aligned Large Language Models via Inference-Time Activation Energy
  8. 2023The Alignment Problem in Context