vLLM Hook v0: A Plug-in for Programming Model Internals on vLLM
On the map: LLM safety and security → Safety alignment, refusal and guardrails
also in 1 more
Abstract (arXiv)
Modern artificial intelligence (AI) models are deployed on inference engines to optimize runtime efficiency and resource allocation, particularly for transformer-based large language models (LLMs). The vLLM project is a major open-source library to support model serving and inference. However, the current implementation of vLLM limits programmability of the internal states of deployed models. This prevents the use of popular test-time model alignment and enhancement methods. For example, it prevents the detection of adversarial prompts based on attention patterns or the adjustment of model responses based on activation steering. To bridge this critical gap, we present vLLM Hook, an opensource plug-in to enable the programming of internal states for vLLM models. Based on a configuration file specifying which internal states to capture, vLLM Hook provides seamless integration to vLLM and supports two essential features: passive programming and active programming. For passive programming, vLLM Hook probes the selected internal states for subsequent analysis, while keeping the model generation intact. For active programming, vLLM Hook enables efficient intervention of model generation by altering the selected internal states. In addition to presenting the core functions of vLLM Hook, in version 0, we demonstrate 3 use cases including prompt injection detection, enhanced retrieval-augmented retrieval (RAG), and activation steering. Finally, we welcome the community's contribution to improve vLLM Hook via https://github.com/ibm/vllm-hook.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 4 of its 4 references that are in the map. First posted on arXiv 2 Feb 2026.
Builds on
4 of 4 references.
References · 4
- 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,944
- 2024Improving Instruction-Following in Language Models through Activation Steeringcited by 160
- 2024Attention Tracker: Detecting Prompt Injection Attacks in LLMscited by 95
- 2025Contrastive Retrieval Heads Improve Attention-Based Re-Rankingcited by 4
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026Masking Stale Observations Helps Search Agents -- Until It Doesn't: A Regime Map and Its Mechanismcited by 5
- 2026AI Steerability 360: A Toolkit for Steering Large Language Modelscited by 2
- 2026Enabling Performant and Flexible Model-Internal Observability for LLM Inferencecited by 0
- 2026AttnLink: Turning Attention into Schema Links for Text-to-SQLcited by 0
- 2026AttnLink: Turning Attention into Schema Links for Text-to-SQL1 Aug 2026
- 2026Masking Stale Observations Helps Search Agents -- Until It Doesn't: A Regime Map and Its Mechanism29 May 2026
- 2026Enabling Performant and Flexible Model-Internal Observability for LLM Inference11 May 2026
- 2026AI Steerability 360: A Toolkit for Steering Large Language Models8 Mar 2026
Similar, not cited
Close in wording, no citation either way
- 2024Language hooks: a modular framework for augmenting LLM reasoning that decouples tool usage from the model and its prompt
- 2025EasySteer: A Unified Framework for High-Performance and Extensible LLM Steering
- 2026InferenceBench: A Benchmark for Open-Ended LLM Inference Optimization by AI Agents
- 2024WebLLM: A High-Performance In-Browser LLM Inference Engine
- 2025Dialz: A Python Toolkit for Steering Vectors
- 2025Comparative Analysis of Large Language Model Inference Serving Systems: A Performance Study of vLLM and HuggingFace TGI
- 2026From Inference Engine to Inference Control Plane: Connecting vLLM, llm-d, and the Evolution of Efficient Distributed LLM Serving
- 2024OpenRLHF: An Easy-to-use, Scalable and High-performance RLHF Framework