mlsanityData to 14 Oct 2026

Concept-Level Explainability for Auditing & Steering LLM Responses

arXiv 2505.07610 ↗First posted 12 May 2025cs.CL cs.AIcited by 6

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

As large language models (LLMs) become widely deployed, concerns about their safety and alignment grow. An approach to steer LLM behavior, such as mitigating biases or defending against jailbreaks, is to identify which parts of a prompt influence specific aspects of the model's output. Token-level attribution methods offer a promising solution, but still struggle in text generation, explaining the presence of each token in the output separately, rather than the underlying semantics of the entire LLM response. We introduce ConceptX, a model-agnostic, concept-level explainability method that identifies the concepts, i.e., semantically rich tokens in the prompt, and assigns them importance based on the outputs' semantic similarity. Unlike current token-level methods, ConceptX also offers to preserve context integrity through in-place token replacements and supports flexible explanation goals, e.g., gender bias. ConceptX enables both auditing, by uncovering sources of bias, and steering, by modifying prompts to shift the sentiment or reduce the harmfulness of LLM responses, without requiring retraining. Across three LLMs, ConceptX outperforms token-level methods like TokenSHAP in both faithfulness and human alignment. Steering tasks boost sentiment shift by 0.252 versus 0.131 for random edits and lower attack success rates from 0.463 to 0.242, outperforming attribution and paraphrasing baselines. While prompt engineering and self-explaining methods sometimes yield safer responses, ConceptX offers a transparent and faithful alternative for improving LLM safety and alignment, demonstrating the practical value of attribution-based explainability in guiding LLM behavior.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 50 of its 66 references that are in the map. First posted on arXiv 12 May 2025.

Builds on

50 of 66 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMs24 Feb

Other references · 49

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2024The Llama 3 Herd of Modelscited by 14,715
  3. 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,070
  4. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  5. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
  6. 2022Survey of Hallucination in Natural Language Generationcited by 2,075
  7. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  8. 2020MiniLM: Deep Self-Attention Distillation for Task-Agnostic Compression of Pre-Trained Transformerscited by 1,463
  9. 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,420
  10. 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,302
  11. 2016ConceptNet 5.5: An Open Multilingual Graph of General Knowledgecited by 1,067
  12. 2022Toy Models of Superpositioncited by 971
37 more
  1. 2024Scaling and evaluating sparse autoencoderscited by 553
  2. 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 529
  3. 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 486
  4. 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 469
  5. 2023Explainability for Large Language Models: A Surveycited by 333
  6. 2019Interpretable machine learning: definitions, methods, and applicationscited by 305
  7. 2024Frontier Models are Capable of In-context Schemingcited by 287
  8. 2023Pretraining Language Models with Human Preferencescited by 247
  9. 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 244
  10. 2023Multilingual Jailbreak Challenges in Large Language Modelscited by 240
  11. 2018Techniques for Interpretable Machine Learningcited by 238
  12. 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
  13. 2020A Survey of the State of Explainable AI for Natural Language Processingcited by 206
  14. 2023Defending Against Alignment-Breaking Attacks via Robustly Aligned LLMcited by 192
  15. 2023Can LLM-Generated Misinformation Be Detected?cited by 177
  16. 2024LLM Agents can Autonomously Hack Websitescited by 109
  17. 2024Are self-explanations from Large Language Models faithful?cited by 101
  18. 2023A Survey on Fairness in Large Language Modelscited by 95
  19. 2021Neuron-level Interpretation of Deep NLP Models: A Surveycited by 81
  20. 2023AI model GPT-3 (dis)informs us better than humanscited by 78
  21. 2024Defending LLMs against Jailbreaking Attacks via Backtranslationcited by 70
  22. 2024SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Mannercited by 63
  23. 2024CYBERSECEVAL 3: Advancing the Evaluation of Cybersecurity Risks and Capabilities in Large Language Modelscited by 58
  24. 2020Generating Hierarchical Explanations on Text Classification via Feature Interaction Detectioncited by 57
  25. 2024Usable XAI: 10 Strategies Towards Exploiting Explainability in the LLM Eracited by 46
  26. 2024TokenSHAP: Interpreting Large Language Models with Monte Carlo Shapley Value Estimationcited by 42
  27. 2022On the Explainability of Natural Language Processing Deep Modelscited by 38
  28. 2024Protecting Your LLMs with Information Bottleneckcited by 29
  29. 2023Defending against Insertion-based Textual Backdoor Attacks via Attributioncited by 25
  30. 2025Interpreting and Steering LLMs with Mutual Information-based Explanations on Sparse Autoencoderscited by 21
  31. 2023ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLPcited by 19
  32. 2023IMBERT: Making BERT Immune to Insertion-based Backdoor Attackscited by 15
  33. 2024SyntaxShap: Syntax-aware Explainability Method for Text Generationcited by 11
  34. 2022Circumventing interpretability: How to defeat mind-readerscited by 6
  35. 2025Aligned Probing: Relating Toxic Behavior and Model Internalscited by 5
  36. 2023Interpretability in Activation Space Analysis of Transformers: A Focused Surveycited by 3
  37. 2024Analyzing Sentiment Polarity Reduction in News Presentation through Contextual Perturbation and Large Language Modelscited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 3; 2026: 3.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024Evaluating Human Alignment and Model Faithfulness of LLM Rationale
  2. 2026Automated Concept Discovery for LLM-as-a-Judge Preference Analysis
  3. 2024Frame Representation Hypothesis: Multi-Token LLM Interpretability and Concept-Guided Text Generation
  4. 2025Unsupervised Concept Vector Extraction for Bias Control in LLMs
  5. 2025Revitalizing Black-Box Interpretability: Actionable Interpretability for LLMs via Proxy Models
  6. 2025Where Did It Go Wrong? Attributing Undesirable LLM Behaviors via Representation Gradient Tracing
  7. 2025Explainability of Large Language Models: Opportunities and Challenges toward Generating Trustworthy Explanations
  8. 2026Auditing Training Data in Domain-adapted LLMs: LoRA-MINT