mlsanityData to 13 Oct 2026

Interpretable Safety Alignment via SAE-Constructed Low-Rank Subspace Adaptation

arXiv 2512.23260 ↗First posted 29 Dec 2025cs.CL cs.AI cs.LGcited by 3

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

also in 2 more
Abstract (arXiv)

Safety alignment -- training large language models (LLMs) to refuse harmful requests while remaining helpful -- is critical for responsible deployment. Prior work established that safety behaviors are governed by low-rank structures, suggesting parameter-efficient fine-tuning (PEFT) should be well-suited for alignment. However, Low-Rank Adaptation (LoRA) consistently underperforms full fine-tuning and reinforcement learning on safety benchmarks. We attribute this gap to semantic entanglement: safety-relevant directions are intertwined with unrelated concepts due to polysemanticity, impeding implicit subspace identification. To address this, we propose SAILS (Safety Alignment via Interpretable Low-rank Subspace), which leverages Sparse Autoencoders (SAEs) to disentangle representations into monosemantic features, constructs an interpretable safety subspace from SAE decoder directions, and uses it to initialize LoRA adapters. Theoretically, we prove that SAE-based identification achieves arbitrarily small recovery error under monosemanticity assumptions, while direct identification suffers an irreducible error floor. Empirically, SAILS achieves up to 99.6% safety rate on Gemma-2-9B -- exceeding full fine-tuning by 7.4 points and matching RLHF-based models -- while updating only 0.19% of parameters and providing interpretability.

Key facts. Cited by 3 papers in the map (data through 13 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 44 of its 70 references that are in the map. First posted on arXiv 29 Dec 2025.

Builds on

44 of 70 references.

Closest ancestors · 6

Same direction, newest first

  1. 2025LoRA is All You Need for Safety Alignment of Reasoning LLMs22 Jul
  2. 2025Safe Pruning LoRA: Robust Distance-Guided Pruning for Safety Alignment in Adaptation of LLMs21 Jun
  3. 2025Understanding Refusal in Language Models with Sparse Autoencoders29 May
  4. 2025Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable1 Mar
  5. 2024Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications7 Feb
  6. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!5 Oct

Other references · 38

  1. 2022Training language models to follow instructions with human feedbackcited by 15,856
  2. 2024The Llama 3 Herd of Modelscited by 14,486
  3. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,231
  4. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,986
  5. 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,798
  6. 2019Parameter-Efficient Transfer Learning for NLPcited by 4,213
  7. 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,053
  8. 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,898
  9. 2017Deep reinforcement learning from human preferencescited by 3,871
  10. 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,785
  11. 2013Distributed Representations of Words and Phrases and their Compositionalitycited by 3,467
  12. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,011
26 more
  1. 2019BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questionscited by 2,163
  2. 2019Fine-Tuning Language Models from Human Preferencescited by 2,139
  3. 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,968
  4. 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,391
  5. 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,042
  6. 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,009
  7. 2021Towards a Unified View of Parameter-Efficient Transfer Learningcited by 868
  8. 2020AdapterFusion: Non-Destructive Task Composition for Transfer Learningcited by 785
  9. 2023LLaMA-Adapter: Efficient Fine-tuning of Language Models with Zero-init Attentioncited by 778
  10. 2023The Geometry of Truth: Emergent Linear Structure in Large Language Model Representations of True/False Datasetscited by 693
  11. 2020Intrinsic Dimensionality Explains the Effectiveness of Language Model Fine-Tuningcited by 665
  12. 2021Compacter: Efficient Low-Rank Hypercomplex Adapter Layerscited by 459
  13. 2024Gemma Scope: Open Sparse Autoencoders Everywhere All At Once on Gemma 2cited by 386
  14. 2023VeRA: Vector-based Random Matrix Adaptationcited by 297
  15. 2024Programming Refusal with Conditional Activation Steeringcited by 200
  16. 2024Llama Scope: Extracting Millions of Features from Llama-3.1-8B with Sparse Autoencoderscited by 137
  17. 2024Safe LoRA: the Silver Lining of Reducing Safety Risks when Fine-tuning Large Language Modelscited by 124
  18. 2023Multitask Prompt Tuning Enables Parameter-Efficient Transfer Learningcited by 115
  19. 2024Aligner: Efficient Alignment by Learning to Correctcited by 98
  20. 2024Steering Language Model Refusal with Sparse Autoencoderscited by 92
  21. 2024Asymmetry in Low-Rank Adapters of Foundation Modelscited by 84
  22. 2023Residual Prompt Tuning: Improving Prompt Tuning with Residual Reparameterizationcited by 64
  23. 2024Interpreting Attention Layer Outputs with Sparse Autoencoderscited by 43
  24. 2024Towards Reliable Evaluation of Behavior Steering Interventions in LLMscited by 35
  25. 2025Interpretable LLM Guardrails via Sparse Representation Steeringcited by 5
  26. 2025SCOPE: Intrinsic Semantic Space Control for Mitigating Copyright Infringement in LLMscited by 3

Built on by

Cited by year (2026 to 13 Oct)

Citing papers per year: 2026: 3.

3 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026LSSF: Safety Alignment for Large Language Models through Low-Rank Safety Subspace Fusion
  2. 2025Decoupling Safety into Orthogonal Subspace: Cost-Efficient and Performance-Preserving Alignment for Large Language Models
  3. 2025Safety Subspaces are Not Linearly Distinct: A Fine-Tuning Case Study
  4. 2025A Guardrail for Safety Preservation: When Safety-Sensitive Subspace Meets Harmful-Resistant Null-Space
  5. 2025EnchTable: Unified Safety Alignment Transfer in Fine-tuned Large Language Models
  6. 2026Safe Transformer: An Explicit Safety Bit For Interpretable And Controllable Alignment
  7. 2026Multilingual Safety Alignment Via Sparse Weight Editing
  8. 2026Knowing without Acting: The Disentangled Geometry of Safety Mechanisms in Large Language Models