Concept-Level Explainability for Auditing & Steering LLM Responses
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
As large language models (LLMs) become widely deployed, concerns about their safety and alignment grow. An approach to steer LLM behavior, such as mitigating biases or defending against jailbreaks, is to identify which parts of a prompt influence specific aspects of the model's output. Token-level attribution methods offer a promising solution, but still struggle in text generation, explaining the presence of each token in the output separately, rather than the underlying semantics of the entire LLM response. We introduce ConceptX, a model-agnostic, concept-level explainability method that identifies the concepts, i.e., semantically rich tokens in the prompt, and assigns them importance based on the outputs' semantic similarity. Unlike current token-level methods, ConceptX also offers to preserve context integrity through in-place token replacements and supports flexible explanation goals, e.g., gender bias. ConceptX enables both auditing, by uncovering sources of bias, and steering, by modifying prompts to shift the sentiment or reduce the harmfulness of LLM responses, without requiring retraining. Across three LLMs, ConceptX outperforms token-level methods like TokenSHAP in both faithfulness and human alignment. Steering tasks boost sentiment shift by 0.252 versus 0.131 for random edits and lower attack success rates from 0.463 to 0.242, outperforming attribution and paraphrasing baselines. While prompt engineering and self-explaining methods sometimes yield safer responses, ConceptX offers a transparent and faithful alternative for improving LLM safety and alignment, demonstrating the practical value of attribution-based explainability in guiding LLM behavior.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 50 of its 66 references that are in the map. First posted on arXiv 12 May 2025.
Builds on
50 of 66 references.
Closest ancestors · 1
Same direction, newest first
Other references · 49
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,070
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2022Survey of Hallucination in Natural Language Generationcited by 2,075
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2020MiniLM: Deep Self-Attention Distillation for Task-Agnostic Compression of Pre-Trained Transformerscited by 1,463
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,420
- 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,302
- 2016ConceptNet 5.5: An Open Multilingual Graph of General Knowledgecited by 1,067
- 2022Toy Models of Superpositioncited by 971
37 more
- 2024Scaling and evaluating sparse autoencoderscited by 553
- 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 529
- 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 486
- 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 469
- 2023Explainability for Large Language Models: A Surveycited by 333
- 2019Interpretable machine learning: definitions, methods, and applicationscited by 305
- 2024Frontier Models are Capable of In-context Schemingcited by 287
- 2023Pretraining Language Models with Human Preferencescited by 247
- 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 244
- 2023Multilingual Jailbreak Challenges in Large Language Modelscited by 240
- 2018Techniques for Interpretable Machine Learningcited by 238
- 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
- 2020A Survey of the State of Explainable AI for Natural Language Processingcited by 206
- 2023Defending Against Alignment-Breaking Attacks via Robustly Aligned LLMcited by 192
- 2023Can LLM-Generated Misinformation Be Detected?cited by 177
- 2024LLM Agents can Autonomously Hack Websitescited by 109
- 2024Are self-explanations from Large Language Models faithful?cited by 101
- 2023A Survey on Fairness in Large Language Modelscited by 95
- 2021Neuron-level Interpretation of Deep NLP Models: A Surveycited by 81
- 2023AI model GPT-3 (dis)informs us better than humanscited by 78
- 2024Defending LLMs against Jailbreaking Attacks via Backtranslationcited by 70
- 2024SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Mannercited by 63
- 2024CYBERSECEVAL 3: Advancing the Evaluation of Cybersecurity Risks and Capabilities in Large Language Modelscited by 58
- 2020Generating Hierarchical Explanations on Text Classification via Feature Interaction Detectioncited by 57
- 2024Usable XAI: 10 Strategies Towards Exploiting Explainability in the LLM Eracited by 46
- 2024TokenSHAP: Interpreting Large Language Models with Monte Carlo Shapley Value Estimationcited by 42
- 2022On the Explainability of Natural Language Processing Deep Modelscited by 38
- 2024Protecting Your LLMs with Information Bottleneckcited by 29
- 2023Defending against Insertion-based Textual Backdoor Attacks via Attributioncited by 25
- 2025Interpreting and Steering LLMs with Mutual Information-based Explanations on Sparse Autoencoderscited by 21
- 2023ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLPcited by 19
- 2023IMBERT: Making BERT Immune to Insertion-based Backdoor Attackscited by 15
- 2024SyntaxShap: Syntax-aware Explainability Method for Text Generationcited by 11
- 2022Circumventing interpretability: How to defeat mind-readerscited by 6
- 2025Aligned Probing: Relating Toxic Behavior and Model Internalscited by 5
- 2023Interpretability in Activation Space Analysis of Transformers: A Focused Surveycited by 3
- 2024Analyzing Sentiment Polarity Reduction in News Presentation through Contextual Perturbation and Large Language Modelscited by 1
Built on by
Citing papers per year: 2025: 3; 2026: 3.
6 papers.
- 2025Explaining Large Language Models with gSMILEcited by 4
- 2025Can Global XAI Methods Reveal Injected Behaviours in LLMs? SHAP vs Rule Extraction vs RuleSHAPcited by 3
- 2025MPF: Aligning and Debiasing Language Models post Deployment via Multi Perspective Fusioncited by 2
- 2026White-Box Sensitivity Auditing with Steering Vectorscited by 0
- 2026A Representation-Level Assessment of Bias Mitigation in Foundation Modelscited by 0
- 2026Investigating Linguistic Steering: An Analysis of Adjectival Effects Across Large Language Model Architecturescited by 0
- 2026Investigating Linguistic Steering: An Analysis of Adjectival Effects Across Large Language Model Architectures28 Apr 2026
- 2026A Representation-Level Assessment of Bias Mitigation in Foundation Models17 Mar 2026
- 2026White-Box Sensitivity Auditing with Steering Vectors23 Jan 2026
- 2025MPF: Aligning and Debiasing Language Models post Deployment via Multi Perspective Fusion3 Jul 2025
- 2025Explaining Large Language Models with gSMILE27 May 2025
- 2025Can Global XAI Methods Reveal Injected Behaviours in LLMs? SHAP vs Rule Extraction vs RuleSHAP16 May 2025
Similar, not cited
Close in wording, no citation either way
- 2024Evaluating Human Alignment and Model Faithfulness of LLM Rationale
- 2026Automated Concept Discovery for LLM-as-a-Judge Preference Analysis
- 2024Frame Representation Hypothesis: Multi-Token LLM Interpretability and Concept-Guided Text Generation
- 2025Unsupervised Concept Vector Extraction for Bias Control in LLMs
- 2025Revitalizing Black-Box Interpretability: Actionable Interpretability for LLMs via Proxy Models
- 2025Where Did It Go Wrong? Attributing Undesirable LLM Behaviors via Representation Gradient Tracing
- 2025Explainability of Large Language Models: Opportunities and Challenges toward Generating Trustworthy Explanations
- 2026Auditing Training Data in Domain-adapted LLMs: LoRA-MINT