xMIx: High-Performance Serving-Time Platform for Mechanistic Interpretability Apps
On the map: LLM safety and security → Safety alignment, refusal and guardrails
also in 1 more
Abstract (arXiv)
Mechanistic interpretability (MI) has emerged as a powerful approach for analyzing and intervening in inference computations, with a growing number of applications such as jailbreak attempt detection, truthfulness evaluation, and hallucination detection. Unfortunately, MI deployment in production model-serving systems is currently not practical, as most existing MI frameworks introduce prohibitively high runtime overheads. The fundamental problem is that MI functions do not compose cleanly with served models: they fragment deployment, often force draining requests and rebuilding serving state, and conflict with critical performance optimizations such as continuous batching and CUDA-graph execution, essential for production deployments. We present xMIx, a serving-native framework for deploying MI applications in production inference serving environments. xMIx enables attaching MI functions to a predefined set of locations in the model runtime, interposing on activations within the layers and residual streams. xMIx supports conditional invocation of MI functions depending on the outputs in preceding model layers. Multiple MI applications can be deployed in a single model instance. xMIx compiles them all into the serving path but activates them dynamically at runtime only when necessary, with negligible performance cost, and without requiring a separate model instance or alternative execution stack. We integrate xMIx with the vLLM serving system and evaluate it across three major models and seven diverse MI applications. xMIx achieves performance comparable to native vLLM execution, incurring a slowdown of 1.3% mean inter-token latency (ITL), 1.2% for tail P99 ITL, 2.6% for mean time to first token (TTFT), and 1.6% for mean total token throughput (TTT).
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 23 of its 33 references that are in the map. First posted on arXiv 11 Jun 2026.
Builds on
23 of 33 references.
Closest ancestors · 2
Same direction, newest first
- 2024Steering Without Side Effects: Improving Post-Deployment Control of Language Models21 Jun
- 2024Refusal in Language Models Is Mediated by a Single Direction17 Jun
Other references · 21
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,944
- 2022FlashAttention: Fast and Memory-Efficient Exact Attention with IO-Awarenesscited by 3,673
- 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,302
- 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,085
- 2023Steering Language Models With Activation Engineeringcited by 922
- 2024LLMs Know More Than They Show: On the Intrinsic Representation of LLM Hallucinationscited by 244
- 2024Programming Refusal with Conditional Activation Steeringcited by 206
- 2023EasyEdit: An Easy-to-use Knowledge Editing Framework for Large Language Modelscited by 98
- 2025SEAL: Steerable Reasoning Calibration of Large Language Models for Freecited by 68
- 2024Semantics-Adaptive Activation Intervention for LLMs via Dynamic Steering Vectorscited by 63
- 2025Steering MoE LLMs via Expert (De)Activationcited by 26
9 more
- 2024Bridging the Language Gaps in Large Language Models with Inference-Time Cross-Lingual Interventioncited by 24
- 2025Two Experts Are All You Need for Steering Thinking: Reinforcing Cognitive Effort in MoE Reasoning Models Without Additional Trainingcited by 16
- 2024Toxicity Detection for Freecited by 15
- 2025SAKE: Steering Activations for Knowledge Editingcited by 13
- 2025EasySteer: A Unified Framework for High-Performance and Extensible LLM Steeringcited by 13
- 2025Universal Jailbreak Suffixes Are Strong Attention Hijackerscited by 10
- 2025EasyEdit2: An Easy-to-use Steering Framework for Editing Large Language Modelscited by 7
- 2026Interpretability Can Be Actionablecited by 7
- 2026Jailbreaking Leaves a Trace: Understanding and Detecting Jailbreak Attacks from Internal Representations of Large Language Modelscited by 4
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026SWE-Serve: Benchmarking Agentic Engineering For Production Inference Serving
- 2026Locate, Steer, and Improve: A Practical Survey of Actionable Mechanistic Interpretability in Large Language Models
- 2025Revitalizing Black-Box Interpretability: Actionable Interpretability for LLMs via Proxy Models
- 2025ServeGen: Workload Characterization and Generation of Large Language Model Serving in Production
- 2024Compact Proofs of Model Performance via Mechanistic Interpretability
- 2024Extracting Interpretable Task-Specific Circuits from Large Language Models for Faster Inference
- 2026From Inference Engine to Inference Control Plane: Connecting vLLM, llm-d, and the Evolution of Efficient Distributed LLM Serving
- 2026Flama: a Python framework for development and deployment of production-ready APIs, machine learning, and LLM services