Mitigating Over-Refusal in Aligned Large Language Models via Inference-Time Activation Energy
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
Safety alignment of large language models currently faces a central challenge: existing alignment techniques often prioritize mitigating responses to harmful prompts at the expense of overcautious behavior, leading models to incorrectly refuse benign requests. A key goal of safe alignment is therefore to improve safety while simultaneously minimizing false refusals. In this work, we introduce Energy Landscape Steering (ELS), a novel, fine-tuning free framework designed to resolve this challenge through dynamic, inference-time intervention. We train a lightweight external Energy-Based Model (EBM) to assign high energy to undesirable states (false refusal or jailbreak) and low energy to desirable states (helpful response or safe reject). During inference, the EBM maps the LLM's internal activations to an energy landscape, and we use the gradient of the energy function to steer the hidden states toward low-energy regions in real time. This dynamically guides the model toward desirable behavior without modifying its parameters. By decoupling behavioral control from the model's core knowledge, ELS provides a flexible and computationally efficient solution. Extensive experiments across diverse models demonstrate its effectiveness, raising compliance on the ORB-H benchmark from 57.3 percent to 82.6 percent while maintaining baseline safety performance. Our work establishes a promising paradigm for building LLMs that simultaneously achieve high safety and low false refusal rates.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 21 of its 34 references that are in the map. First posted on arXiv 9 Oct 2025.
Builds on
21 of 34 references.
Closest ancestors · 1
Same direction, newest first
- 2025Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Models9 Jun
Other references · 20
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,203
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 460
- 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 377
- 2024KTO: Model Alignment as Prospect Theoretic Optimizationcited by 256
- 2020HateCheck: Functional Tests for Hate Speech Detection Modelscited by 215
- 2024Programming Refusal with Conditional Activation Steeringcited by 191
8 more
- 2020Recipes for Safety in Open-domain Chatbotscited by 168
- 2025X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agentscited by 112
- 2021Detoxifying Language Models Risks Marginalizing Minority Voicescited by 106
- 2021On the Safety of Conversational Models: Taxonomy, Dataset, and Benchmarkcited by 73
- 2024Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablationcited by 48
- 2025AlphaSteer: Learning Refusal Steering with Principled Null-Space Constraintcited by 45
- 2025CARES: Comprehensive Evaluation of Safety and Adversarial Robustness in Medical LLMscited by 26
- 2025SafeDialBench: A Fine-Grained Safety Evaluation Benchmark for Large Language Models in Multi-Turn Dialogues with Diverse Jailbreak Attackscited by 23
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026Training LLMs for Divide-and-Conquer Reasoning Elevates Test-Time Scalabilitycited by 4
- 2026Quantifying and Mitigating Premature Closure in Frontier LLMscited by 3
- 2026Safin-1: Safety from Within through Memory-Native State Evolutioncited by 1
- 2026Making Your LLMs More Objective: Stabilizing LLM Safety Behavior Across Traits with Trait-Invariant Safety Tuningcited by 0
- 2026Safin-1: Safety from Within through Memory-Native State Evolution31 Aug 2026
- 2026Making Your LLMs More Objective: Stabilizing LLM Safety Behavior Across Traits with Trait-Invariant Safety Tuning12 Aug 2026
- 2026Quantifying and Mitigating Premature Closure in Frontier LLMs14 May 2026
- 2026Training LLMs for Divide-and-Conquer Reasoning Elevates Test-Time Scalability2 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2025Just Enough Shifts: Mitigating Over-Refusal in Aligned Language Models with Targeted Representation Fine-Tuning
- 2026Fail-Closed Alignment for Large Language Models
- 2026The Geometry of Refusal: Linear Instability in Safety-Aligned LLMs
- 2025From Threat to Tool: Leveraging Refusal-Aware Injection Attacks for Safety Alignment
- 2026ALTSTEER: Selective Safety Steering for Moving Beyond Hard Refusals to Constructive Alternatives
- 2024SCANS: Mitigating the Exaggerated Safety for LLMs via Safety-Conscious Activation Steering
- 2026When Safety Routing Breaks: Understanding Alignment Fragility under Benign Fine-Tuning
- 2025SARSteer: Safeguarding Large Audio-Language Models via Safe-Ablated Refusal Steering