Do Models Share Safety Representations? Cross-Model Steering for Safe Visual Generation
Not on the map. Why?
Abstract (arXiv)
Recent progress in generative modeling has made safety control a central challenge, yet existing approaches remain largely model-specific, requiring retraining or tailored interventions for each new architecture. In this work, we ask whether safety can be represented as a portable latent direction, learned once and reused across heterogeneous generators. We introduce the first framework for cross-model safety steering, in which a safety direction is estimated in a source LLM from paired safe-unsafe prompts, transported to a target generator through a lightweight alignment fitted on benign data alone, and applied at inference time. Crucially, our pipeline never accesses unsafe data on the target side, isolating whether safety can be transferred through shared representation geometry. Beyond a single global direction, we also identify a multi-vector extension that captures category-specific safety behaviors, enabling more selective control. We evaluate our approach in text-to-image and text-to-video generation across diverse source-target model pairs. Across models, transferred safety directions achieve ASR reduction and CLIP-Score/FID trade-offs comparable to directions learned natively on the target model using unsafe data, while requiring no target-side unsafe data. This indicates that safety improvements do not come at the expense of generation quality. Our results point to a modular view of safety: safety-relevant behavior is not purely model-local, but can be controlled through latent directions that persist across models. This suggests a new path toward lightweight, reusable safety mechanisms that do not require target-side unsafe data.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 50 of its 59 references that are in the map. First posted on arXiv 3 Jun 2026.
Builds on
50 of 59 references.
References · 50
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2025Qwen3 Technical Reportcited by 8,820
- 2025Qwen2.5-VL Technical Reportcited by 5,587
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,181
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2023Mistral 7Bcited by 3,164
- 2016Pointer Sentinel Mixture Modelscited by 3,096
38 more
- 2025Wan: Open and Advanced Large-Scale Video Generative Modelscited by 2,708
- 2023A Survey of Large Language Modelscited by 2,576
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
- 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,085
- 2025Qwen-Image Technical Reportcited by 1,044
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
- 2023Steering Language Models With Activation Engineeringcited by 922
- 2023The Linear Representation Hypothesis and the Geometry of Large Language Modelscited by 716
- 2023Erasing Concepts from Diffusion Modelscited by 539
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
- 2023Unified Concept Editing in Diffusion Modelscited by 388
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 386
- 2024The Platonic Representation Hypothesiscited by 382
- 2021Persistent Anti-Muslim Bias in Large Language Modelscited by 377
- 2021Multimodal datasets: misogyny, pornography, and malignant stereotypescited by 327
- 2024Improving Alignment and Robustness with Circuit Breakerscited by 322
- 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 307
- 2025Z-Image: An Efficient Image Generation Foundation Model with Single-Stream Diffusion Transformercited by 277
- 2014Understanding image representations by measuring their equivariance and equivalencecited by 243
- 2022Extracting Latent Steering Vectors from Pretrained Language Modelscited by 225
- 2021Revisiting Model Stitching to Compare Neural Representationscited by 209
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Modelscited by 194
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applicationscited by 169
- 2024Improving Instruction-Following in Language Models through Activation Steeringcited by 160
- 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
- 2023UniMax: Fairer and more Effective Language Sampling for Large-Scale Multilingual Pretrainingcited by 151
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Eraserscited by 120
- 2024Latent Guard: a Safety Framework for Text-to-image Generationcited by 71
- 2024Controlling Language and Diffusion Models by Transporting Activationscited by 68
- 2024T2VSafetyBench: Evaluating the Safety of Text-to-Video Generative Modelscited by 66
- 2025Harnessing the Universal Geometry of Embeddingscited by 55
- 2025Transferring Linear Features Across Language Models With Model Stitchingcited by 21
- 2025Activation Space Interventions Can Be Transferred Between Large Language Modelscited by 19
- 2025Video Unlearning via Low-Rank Refusal Vectorcited by 13
- 2025Cross-model Transferability among Large Language Models on the Platonic Representations of Conceptscited by 12
- 2025Mitigating Sexual Content Generation via Embedding Distortion in Text-conditioned Diffusion Modelscited by 7
- 2025Linear Representation Transferability Hypothesis: Leveraging Small Models to Steer Large Modelscited by 7
- 2026Conditioned Activation Transport for T2I Safety Steeringcited by 3
Built on by
Citing papers per year: 2026: 2.
2 papers.