mlsanityData to 7 Oct 2026

Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Models

arXiv 2605.27997 ↗First posted 27 May 2026cs.CL cs.AI cs.LGcited by 0

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

Large language models frequently generate toxic, hateful, or harmful content, yet existing mitigation methods rely on costly retraining or output-level filtering with no mechanistic insight into where toxicity originates internally. We introduce Meow2X and TRNE, two complementary retraining-free frameworks that localize toxicity to specific layers and neurons by analyzing activation differentials between toxic and neutral prompts, then suppress them via inference-time scaling or minimal rank-one weight edits -- without any gradient descent. Evaluations across five LMs, two benchmarks, and 90 configurations using dual safety evaluators demonstrate consistent toxicity reduction while preserving language modeling quality. Our analysis reveals that toxicity is disproportionately encoded in early MLP layers, varies across architectures, and is systematically underestimated by single-evaluator setups -- underscoring the need for multi-evaluator safety assessment. By bridging mechanistic interpretability with practical detoxification, our framework offers a principled path toward safer, more transparent language models.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 27 of its 43 references that are in the map. First posted on arXiv 27 May 2026.

Builds on

27 of 43 references.

Closest ancestors · 4

Same direction, newest first

  1. 2025HarmMetric Eval: Benchmarking Metrics and Judges for LLM Harmfulness Assessment29 Sep
  2. 2025Adaptive Detoxification: Safeguarding General Capabilities of LLMs through Toxicity-Aware Knowledge Editing28 May
  3. 2024On the Role of Attention Heads in Large Language Model Safety17 Oct
  4. 2024Towards Understanding Safety Alignment: A Mechanistic Perspective from Safety Neurons20 Jun

Other references · 23

  1. 2022Training language models to follow instructions with human feedbackcited by 15,712
  2. 2022Locating and Editing Factual Associations in GPTcited by 2,609
  3. 2019Similarity of Neural Network Representations Revisitedcited by 1,695
  4. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
  5. 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 793
  6. 2017Network Dissection: Quantifying Interpretability of Deep Visual Representationscited by 703
  7. 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 434
  8. 2021Causal Abstractions of Neural Networkscited by 401
  9. 2023Towards Best Practices of Activation Patching in Language Models: Metrics and Methodscited by 328
  10. 2021Challenges in Detoxifying Language Modelscited by 169
  11. 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 57
  12. 2024Preference Tuning For Toxicity Mitigation Generalizes Across Languagescited by 31
11 more
  1. 2024Whispering Experts: Neural Interventions for Toxicity Mitigation in Language Modelscited by 31
  2. 2024Can LLMs Recognize Toxicity? A Structured Investigation Framework and Toxicity Metriccited by 23
  3. 2024From One to Many: Expanding the Scope of Toxicity Mitigation in Language Modelscited by 18
  4. 2024MultiParaDetox: Extending Text Detoxification with Parallel Data to New Languagescited by 13
  5. 2025Unraveling LLM Jailbreaks Through Safety Knowledge Neuronscited by 7
  6. 2023Added Toxicity Mitigation at Inference Time for Multimodal and Massively Multilingual Translationcited by 5
  7. 2024How Does DPO Reduce Toxicity? A Mechanistic Neuron-Level Analysiscited by 5
  8. 2024ToxiLab: How Well Do Open-Source LLMs Generate Synthetic Toxicity Data?cited by 5
  9. 2024Cross-Lingual Transfer of Debiasing and Detoxification in Multilingual LLMs: An Extensive Investigationcited by 5
  10. 2025Breaking mBad! Supervised Fine-tuning for Cross-Lingual Detoxificationcited by 3
  11. 2025Redefining Experts: Interpretable Decomposition of Language Models for Toxicity Mitigationcited by 3

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025Aligned Probing: Relating Toxic Behavior and Model Internals
  2. 2025Rethinking Toxicity Evaluation in Large Language Models: A Multi-Label Perspective
  3. 2025SGM: Safety Glasses for Multimodal Large Language Models via Neuron-Level Detoxification
  4. 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models
  5. 2026Detoxifying LLMs via Representation Erasure-Based Preference Optimization
  6. 2025Circumventing Safety Alignment in Large Language Models Through Embedding Space Toxicity Attenuation
  7. 2023Characterizing Large Language Model Geometry Helps Solve Toxicity Detection and Generation
  8. 2025Something Just Like TRuST : Toxicity Recognition of Span and Target