mlsanityData to 7 Oct 2026

SafeConstellations: Mitigating Over-Refusals in LLMs Through Task-Aware Representation Steering

arXiv 2508.11290 ↗First posted 15 Aug 2025cs.CLcited by 0

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

LLMs increasingly exhibit over-refusal behavior, where safety mechanisms cause models to reject benign instructions that seemingly resemble harmful content. This phenomenon diminishes utility in production applications that repeatedly rely on common prompt templates or applications that frequently rely on LLMs for specific tasks (e.g. sentiment analysis, language translation). Through extensive evaluation, we demonstrate that LLMs persist in refusing inputs containing harmful content, even when they are reframed with tasks that have benign intent. Our mechanistic analysis reveals that LLMs follow distinct "constellation" patterns in embedding space as representations traverse layers, with each NLP task maintaining consistent trajectories that shift predictably between refusal and non-refusal cases. We introduce SafeConstellations, an inference-time trajectory-shifting approach that tracks task-specific trajectory patterns and guides representations toward non-refusal pathways. By selectively guiding model behavior only on tasks prone to over-refusal, our method reduces over-refusals with minimal impact on utility -- offering a principled and conditional approach to mitigating over-refusals.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 26 of its 40 references that are in the map. First posted on arXiv 15 Aug 2025.

Builds on

26 of 40 references.

Closest ancestors · 8

Same direction, newest first

  1. 2025Alignment Quality Index (AQI) : Beyond Refusals: AQI as an Intrinsic Alignment Diagnostic via Latent Geometry, Cluster Divergence, and Layer wise Pooled Representations16 Jun
  2. 2025FalseReject: A Resource for Improving Contextual Safety and Mitigating Over-Refusals in LLMs via Structured Reasoning12 May
  3. 2025SaRO: Enhancing LLM Safety through Reasoning-based Alignment13 Apr
  4. 2025Improving LLM Safety Alignment with Dual-Objective Optimization5 Mar
  5. 2025SafeSwitch: Steering Unsafe LLM Behavior via Internal Activation Signals3 Feb
  6. 2024Refusal in Language Models Is Mediated by a Single Direction17 Jun
  7. 2024Emulated Disalignment: Safety Alignment for Large Language Models May Backfire!19 Feb
  8. 2024Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications7 Feb

Other references · 18

  1. 2022Training language models to follow instructions with human feedbackcited by 15,712
  2. 2017Proximal Policy Optimization Algorithmscited by 14,441
  3. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,160
  4. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  5. 2020Measuring Massive Multitask Language Understandingcited by 7,768
  6. 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 630
  7. 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 434
  8. 2023Certifying LLM Safety against Adversarial Promptingcited by 248
  9. 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decodingcited by 233
  10. 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 225
  11. 2023Defending Against Alignment-Breaking Attacks via Robustly Aligned LLMcited by 173
  12. 2024Safe LoRA: the Silver Lining of Reducing Safety Risks when Fine-tuning Large Language Modelscited by 122
6 more
  1. 2024GradSafe: Detecting Jailbreak Prompts for LLMs via Safety-Critical Gradient Analysiscited by 87
  2. 2024Defending Large Language Models Against Jailbreak Attacks via Layer-specific Editingcited by 77
  3. 2023Knowledge is a Region in Weight Space for Fine-tuned Language Modelscited by 58
  4. 2025Jailbreak Attack Initializations as Extractors of Compliance Directionscited by 10
  5. 2024POROver: Improving Safety and Reducing Overrefusal in Large Language Models with Overgeneration and Preference Optimizationcited by 8
  6. 2025Benchmarking Large Language Models for Cryptanalysis and Side-Channel Vulnerabilitiescited by 5

Built on by

Not cited yet.