mlsanityData to 7 Oct 2026

Mitigating Over-Refusal in Aligned Large Language Models via Inference-Time Activation Energy

arXiv 2510.08646 ↗First posted 9 Oct 2025cs.LG cs.AI cs.CLcited by 4

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

also in 1 more
Abstract (arXiv)

Safety alignment of large language models currently faces a central challenge: existing alignment techniques often prioritize mitigating responses to harmful prompts at the expense of overcautious behavior, leading models to incorrectly refuse benign requests. A key goal of safe alignment is therefore to improve safety while simultaneously minimizing false refusals. In this work, we introduce Energy Landscape Steering (ELS), a novel, fine-tuning free framework designed to resolve this challenge through dynamic, inference-time intervention. We train a lightweight external Energy-Based Model (EBM) to assign high energy to undesirable states (false refusal or jailbreak) and low energy to desirable states (helpful response or safe reject). During inference, the EBM maps the LLM's internal activations to an energy landscape, and we use the gradient of the energy function to steer the hidden states toward low-energy regions in real time. This dynamically guides the model toward desirable behavior without modifying its parameters. By decoupling behavioral control from the model's core knowledge, ELS provides a flexible and computationally efficient solution. Extensive experiments across diverse models demonstrate its effectiveness, raising compliance on the ORB-H benchmark from 57.3 percent to 82.6 percent while maintaining baseline safety performance. Our work establishes a promising paradigm for building LLMs that simultaneously achieve high safety and low false refusal rates.

Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 21 of its 34 references that are in the map. First posted on arXiv 9 Oct 2025.

Builds on

21 of 34 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Models9 Jun

Other references · 20

  1. 2022Training language models to follow instructions with human feedbackcited by 15,712
  2. 2017Proximal Policy Optimization Algorithmscited by 14,441
  3. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  4. 2020Measuring Massive Multitask Language Understandingcited by 7,768
  5. 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,203
  6. 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
  7. 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
  8. 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 460
  9. 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 377
  10. 2024KTO: Model Alignment as Prospect Theoretic Optimizationcited by 256
  11. 2020HateCheck: Functional Tests for Hate Speech Detection Modelscited by 215
  12. 2024Programming Refusal with Conditional Activation Steeringcited by 191
8 more
  1. 2020Recipes for Safety in Open-domain Chatbotscited by 168
  2. 2025X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agentscited by 112
  3. 2021Detoxifying Language Models Risks Marginalizing Minority Voicescited by 106
  4. 2021On the Safety of Conversational Models: Taxonomy, Dataset, and Benchmarkcited by 73
  5. 2024Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablationcited by 48
  6. 2025AlphaSteer: Learning Refusal Steering with Principled Null-Space Constraintcited by 45
  7. 2025CARES: Comprehensive Evaluation of Safety and Adversarial Robustness in Medical LLMscited by 26
  8. 2025SafeDialBench: A Fine-Grained Safety Evaluation Benchmark for Large Language Models in Multi-Turn Dialogues with Diverse Jailbreak Attackscited by 23

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 4.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Just Enough Shifts: Mitigating Over-Refusal in Aligned Language Models with Targeted Representation Fine-Tuning
  2. 2026Fail-Closed Alignment for Large Language Models
  3. 2026The Geometry of Refusal: Linear Instability in Safety-Aligned LLMs
  4. 2025From Threat to Tool: Leveraging Refusal-Aware Injection Attacks for Safety Alignment
  5. 2026ALTSTEER: Selective Safety Steering for Moving Beyond Hard Refusals to Constructive Alternatives
  6. 2024SCANS: Mitigating the Exaggerated Safety for LLMs via Safety-Conscious Activation Steering
  7. 2026When Safety Routing Breaks: Understanding Alignment Fragility under Benign Fine-Tuning
  8. 2025SARSteer: Safeguarding Large Audio-Language Models via Safe-Ablated Refusal Steering