Interpretable LLM Guardrails via Sparse Representation Steering
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Large language models (LLMs) exhibit impressive capabilities in generation tasks but are prone to producing harmful, misleading, or biased content, posing significant ethical and safety concerns. To mitigate such risks, representation engineering, which steer model behavior toward desired attributes by injecting carefully designed steering vectors into LLM's representations at inference time, has emerged as a promising alternative to fine-tuning approaches. However, due to the semantically entangled nature of LLM's representation, existing representation engineering methods still suffer from several limitations: limited fine-grained controllability, content quality degradation, and conflict in multi-attribute control. To overcome these challenges, we propose Sparse Representation Steering (SRS), a novel framework that achieves fine-grained and interpretable control over LLM behavior by first disentangling internal activations into a sparse, semantically meaningful representation space, and then selectively steering relevant dimensions. Specifically, SRS leverages a pretrained Sparse Autoencoder (SAE) to transform dense, entangled activation patterns into a sparse monosemantic feature space. To identify relevant features, SRS contrasts sparse activations from positive and negative prompt pairs and measures their bidirectional KL divergence to locate dimensions most associated with the target attribute. We conduct comprehensive experiments on Gemma-2 series model across three alignment dimensions, i.e., safety, fairness, and truthfulness, to evaluate the effectiveness of SRS. Results show that SRS consistently outperforms existing steering methods, which achieves significantly improved controllability across both single and multiple attribute settings, while preserving high linguistic quality and general ability.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. First posted on arXiv 21 Mar 2025.
Builds on
0 of 0 references.
No references here yet.
Built on by
Citing papers per year: 2025: 2; 2026: 3.
5 papers.
- 2025Steering the CensorShip: Uncovering Representation Vectors for LLM "Thought" Controlcited by 14
- 2025Interpretable Safety Alignment via SAE-Constructed Low-Rank Subspace Adaptationcited by 2
- 2026BLOCK-EM: Preventing Emergent Misalignment via Latent Blockingcited by 2
- 2026CircuitSteer: Geometrically Aligned Multi-Layer Steering via Sparse Autoencoder Circuitscited by 1
- 2026SafeEvo: Deciphering the Safety Alignment Mechanism and Evolution in Language Modelscited by 0
- 2026SafeEvo: Deciphering the Safety Alignment Mechanism and Evolution in Language Models7 Oct 2026
- 2026CircuitSteer: Geometrically Aligned Multi-Layer Steering via Sparse Autoencoder Circuits6 Aug 2026
- 2026BLOCK-EM: Preventing Emergent Misalignment via Latent Blocking31 Jan 2026
- 2025Interpretable Safety Alignment via SAE-Constructed Low-Rank Subspace Adaptation29 Dec 2025
- 2025Steering the CensorShip: Uncovering Representation Vectors for LLM "Thought" Control23 Apr 2025