Analysing Self-Harm Representations in Language Models: a Cross-Architecture Study
Not on the map. Why?
Abstract (arXiv)
Self-harm content is particularly challenging to detect using NLP techniques, and is also a high-stakes task which requires the highest accuracy to enable timely intervention or flagging at-risk users. We therefore present an analysis of how LLMs represent such self-harm content, which has downstream applications in self-harm detection, LLM intervention and governance and policing. In this paper, we focus on two datasets and four models, and perform two main experiments: (1) We train and evaluate linear probes across all layers of each model on two self-harm datasets: X-Sensitive and SH-Detection. Across both corpora, self-harm information crystallizes in the final 3 - 7% of network layers (93 to 97% depth). (2) We extract contrastive self-harm directions and, after performing a normaliation step, we find that the most accurate probes are not necessarily the most linearly separable. In particular, we find Gemma-3-4B to represent this textitcontrastive self-harm direction in a slightly different, more intricate way than the other LLMs.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 19 of its 36 references that are in the map. First posted on arXiv 24 Jul 2026.
Builds on
19 of 36 references.
References · 19
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,150
- 2016Understanding intermediate layers using linear classifier probescited by 1,353
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
- 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,302
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
- 2021Probing Classifiers: Promises, Shortcomings, and Advancescited by 876
- 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 767
- 2024Programming Refusal with Conditional Activation Steeringcited by 206
- 2017Depression and Self-Harm Risk Assessment in Online Forumscited by 84
- 2025Safety is Not Only About Refusal: Reasoning-Enhanced Fine-tuning for Interpretable LLM Safetycited by 39
7 more
- 2025Shifting Perspectives: Steering Vectors for Robust Bias Mitigation in LLMscited by 14
- 2020Towards Preemptive Detection of Depression and Anxiety in Twittercited by 13
- 2016Identifying Depression on Twittercited by 10
- 2025Just a Scratch: Enhancing LLM Capabilities for Self-harm Detection through Intent Differentiation and Emoji Interpretationcited by 7
- 2024Sensitive Content Classification in Social Media: A Holistic Resource and Evaluationcited by 4
- 2025Domain-Specific Constitutional AI: Enhancing Safety in LLM-Powered Mental Health Chatbotscited by 4
- 2025Preventing Another Tessa: Modular Safety Middleware For Health-Adjacent AI Assistantscited by 3
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026One Year Later...The Harms Persist, But So Do We!
- 2025`For Argument's Sake, Show Me How to Harm Myself!': Jailbreaking LLMs in Suicide and Self-Harm Contexts
- 2026DisaBench: A Participatory Evaluation Framework for Disability Harms in Language Models
- 2026Retrieval-Augmented Generation in LLMs for Mental Health: Quantifying the Incremental Contribution of Retrieval Within a Layered Safety Architecture
- 2026DistressBench: Evaluating Multi-Dimensional Crisis Support in Large Language Models
- 2025The Geometry of Harmfulness in LLMs through Subconcept Probing
- 2023How We Define Harm Impacts Data Annotations: Explaining How Annotators Distinguish Hateful, Offensive, and Toxic Comments
- 2024A Dual-Prompting for Interpretable Mental Health Language Models