mlsanityData to 14 Oct 2026

S3LoRA: Safe Spectral Sharpness-Guided Pruning in Adaptation of Agent Planner

arXiv 2508.15068 ↗First posted 20 Aug 2025cs.AIcited by 1

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

Adapting Large Language Models (LLMs) using parameter-efficient fine-tuning (PEFT) techniques such as LoRA has enabled powerful capabilities in LLM-based agents. However, these adaptations can unintentionally compromise safety alignment, leading to unsafe or unstable behaviors, particularly in agent planning tasks. Existing safety-aware adaptation methods often require access to both base and instruction-tuned model checkpoints, which are frequently unavailable in practice, limiting their applicability. We propose S3LoRA (Safe Spectral Sharpness-Guided Pruning LoRA), a lightweight, data-free, and model-independent framework that mitigates safety risks in LoRA-adapted models by inspecting only the fine-tuned weight updates. We first introduce Magnitude-Aware Spherically Normalized SVD (MAS-SVD), which robustly analyzes the structural properties of LoRA updates while preserving global magnitude information. We then design the Spectral Sharpness Index (SSI), a sharpness-aware metric to detect layers with highly concentrated and potentially unsafe updates. These layers are pruned post-hoc to reduce risk without sacrificing task performance. Extensive experiments and ablation studies across agent planning and language generation tasks show that S3LoRA consistently improves safety metrics while maintaining or improving utility metrics and significantly reducing inference cost. These results establish S3LoRA as a practical and scalable solution for safely deploying LLM-based agents in real-world, resource-constrained, and safety-critical environments.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 26 of its 44 references that are in the map. First posted on arXiv 20 Aug 2025.

Builds on

26 of 44 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025A Framework for Benchmarking and Aligning Task-Planning Safety in LLM-Based Embodied Agents20 Apr

Other references · 25

  1. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  2. 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,754
  3. 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
  4. 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,592
  5. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
  6. 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,439
  7. 2023LLaVA-Med: Training a Large Language-and-Vision Assistant for Biomedicine in One Daycited by 1,305
  8. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
  9. 2019SAMSum Corpus: A Human-annotated Dialogue Dataset for Abstractive Summarizationcited by 535
  10. 2023AgentTuning: Enabling Generalized Agent Abilities for LLMscited by 338
  11. 2023Shadow Alignment: The Ease of Subverting Safely-Aligned Language Modelscited by 297
  12. 2024Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modificationscited by 231
13 more
  1. 2025Survey on Evaluation of LLM-based Agentscited by 204
  2. 2017Spectral Norm Regularization for Improving the Generalizability of Deep Learningcited by 182
  3. 2023Removing RLHF Protections in GPT-4 via Fine-Tuningcited by 171
  4. 2023OpenAgents: An Open Platform for Language Agents in the Wildcited by 137
  5. 2024AgentGen: Enhancing Planning Abilities for Large Language Model based Agent via Environment and Task Generationcited by 83
  6. 2025SVD-LLM V2: Optimizing Singular Value Truncation for Large Language Model Compressioncited by 67
  7. 2024AgentBank: Towards Generalized LLM Agents via Fine-Tuning on 50000+ Interaction Trajectoriescited by 56
  8. 2024Approaching Deep Learning through the Spectral Dynamics of Weightscited by 31
  9. 2025ATLaS: Agent Tuning via Learning Critical Stepscited by 31
  10. 2025Safe Pruning LoRA: Robust Distance-Guided Pruning for Safety Alignment in Adaptation of LLMscited by 10
  11. 2018Matrices with Gaussian noise: optimal estimates for singular subspace perturbationcited by 6
  12. 2024Robust SVD Made Easy: A fast and reliable algorithm for large-scale data analysiscited by 4
  13. 2025On the Interaction of Compressibility and Adversarial Robustnesscited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026Safe Context Switching for Agents in the Wild: Mitigating Subspace Interference via Orthogonal Adaptation
  2. 2025Decoupling Safety into Orthogonal Subspace: Cost-Efficient and Performance-Preserving Alignment for Large Language Models
  3. 2026SHE: Trajectory-driven Safety Harness Evolution for LLM Agents
  4. 2025AgentAlign: Navigating Safety Alignment in the Shift from Informative to Agentic Large Language Models
  5. 2026CLEAR: Continuous Latent Adapter Routing for Utility-Preserving LLM Safety Alignment
  6. 2026RSRA: Training-Free Probing of Representation Sensitivity for Efficient LoRA Rank Allocation
  7. 2025SafeSieve: From Heuristics to Experience in Progressive Pruning for LLM-based Multi-Agent Communication
  8. 2026SFT or RL for Tool-Calling Agents? A Controlled Study Across Data, Method, and Scale