mlsanityData to 14 Oct 2026

Guiding Giants: Lightweight Controllers for Weighted Activation Steering in LLMs

arXiv 2505.20309 ↗First posted 22 May 2025cs.CL cs.LGcited by 8

On the map: Mechanistic interpretability → Steering and probing for LLM safety

Abstract (arXiv)

Controlling undesirable Large Language Model (LLM) behaviors, such as the generation of unsafe content or failing to adhere to safety guidelines, often relies on costly fine-tuning. Activation steering provides an alternative for inference-time control, but existing methods typically lack fine-grained, adaptive mechanisms. We introduce a novel approach using a lightweight, trainable controller network integrated during inference. This controller network observes specific intermediate LLM activations and predicts both a global scaling factor and layer-specific weights. The predicted global scaling factor and layer-specific weights then dynamically modulate the intensity of a steering patch, derived from a pre-computed "refusal direction" vector, applied across the LLM's layers during generation. Trained on activations from both harmful and benign prompts, our controller learns to discriminatively apply nuanced, layer-aware interventions, activating steering primarily for harmful inputs. Experiments using safety benchmarks like ToxicChat & In-The-Wild Jailbreak Prompts demonstrate that our weighted steering controller significantly increases refusal rates compared to the base LLM, achieving targeted behavioral modification without altering the original model parameters. Our experiments with Llama-3.1-8B, Llama-3.2-1B & Mistral-7B show our approach outperforms existing methods, presenting an efficient and adaptive method for fine-grained control over LLM behavior at inference time.

Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Steering and probing for LLM safety, one of 13 directions in Mechanistic interpretability. Builds on 23 of its 41 references that are in the map. First posted on arXiv 22 May 2025.

Builds on

23 of 41 references.

Closest ancestors · 1

Same direction, newest first

  1. 2024Programming Refusal with Conditional Activation Steering6 Sep

Other references · 22

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2021Training Verifiers to Solve Math Word Problemscited by 10,109
  3. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  4. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  5. 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
  6. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  7. 2023G-Eval: NLG Evaluation using GPT-4 with Better Human Alignmentcited by 2,276
  8. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  9. 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,302
  10. 2023Steering Language Models With Activation Engineeringcited by 922
  11. 2024Length-Controlled AlpacaEval: A Simple Way to Debias Automatic Evaluatorscited by 897
  12. 2023AlpacaFarm: A Simulation Framework for Methods that Learn from Human Feedbackcited by 748
10 more
  1. 2020Aligning AI With Shared Human Valuescited by 723
  2. 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 231
  3. 2024Improving Instruction-Following in Language Models through Activation Steeringcited by 160
  4. 2024Rule Based Rewards for Language Model Safetycited by 108
  5. 2024Adaptive Activation Steering: A Tuning-Free LLM Truthfulness Improvement Method for Diverse Hallucinations Categoriescited by 77
  6. 2024Robust LLM safeguarding via refusal feature adversarial trainingcited by 64
  7. 2024SG-Bench: Evaluating LLM Safety Generalization Across Diverse Tasks and Prompt Typescited by 60
  8. 2024Extending Activation Steering to Broad Skills and Multiple Behaviourscited by 40
  9. 2025FairSteer: Inference Time Debiasing for LLMs with Dynamic Activation Steeringcited by 40
  10. 2024Controlling Large Language Model Agents with Entropic Activation Steeringcited by 29

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 3; 2026: 5.

8 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Does Steering Break Your Model? A Multi-Dimensional Evaluation Suite for LLM Steering Methods
  2. 2025The Rogue Scalpel: Activation Steering Compromises LLM Safety
  3. 2024Semantics-Adaptive Activation Intervention for LLMs via Dynamic Steering Vectors
  4. 2024Steering Language Model Refusal with Sparse Autoencoders
  5. 2026FaithSteer-BENCH: A Deployment-Aligned Stress-Testing Benchmark for Inference-Time Steering
  6. 2025Steering Language Models with Weight Arithmetic
  7. 2025EasySteer: A Unified Framework for High-Performance and Extensible LLM Steering
  8. 2026OPIUM: Mitigating Steering Externalities and Over-Refusal via Dual Objective Latent Optimization