Kernelized Activation Steering
Not on the map. Why?
Abstract (arXiv)
Activation steering provides a simple, training-free mechanism for controlling attributes of generative models such as sentiment, style, and helpfulness. However, standard approaches such as Difference-in-Means apply a single input-independent steering vector across all activations, limiting expressivity and ignoring the local geometry of the activation space. We propose Kernelized Activation Steering (KAS), a unifying framework that lifts activation steering into a reproducing kernel Hilbert space. KAS formulates steering as an optimization problem expressed purely via kernel evaluations, yielding an implicit, activation-dependent steering score without constructing explicit feature maps. Unlike DiM, KAS induces locally adaptive steering: each activation is modified according to its relative position with respect to source and target reference sets, producing a nonlinear steering field over the representation space. Importantly, DiM is recovered as a special case under a linear kernel, while richer kernels enable geometry-aware interventions. Across standard activation steering tasks, including jailbreaking LLMs and image style control, KAS outperforms or is on par with the existing methods.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 42 of its 60 references that are in the map. First posted on arXiv 1 Oct 2026.
Builds on
42 of 60 references.
References · 42
- 2017Attention Is All You Needcited by 59,932
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,346
- 2015Microsoft COCO Captions: Data Collection and Evaluation Servercited by 1,447
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2016Understanding intermediate layers using linear classifier probescited by 1,279
- 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,259
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,239
- 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,009
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 960
30 more
- 2022Toy Models of Superpositioncited by 928
- 2023Steering Language Models With Activation Engineeringcited by 824
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2023The Linear Representation Hypothesis and the Geometry of Large Language Modelscited by 679
- 2023The Geometry of Truth: Emergent Linear Structure in Large Language Model Representations of True/False Datasetscited by 673
- 2016Stein Variational Gradient Descent: A General Purpose Bayesian Inference Algorithmcited by 498
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 494
- 2020Null It Out: Guarding Protected Attributes by Iterative Nullspace Projectioncited by 442
- 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 439
- 2016Kernel Mean Embedding of Distributions: A Review and Beyondcited by 360
- 2024tinyBenchmarks: evaluating LLMs with fewer examplescited by 295
- 2023LEACE: Perfect linear concept erasure in closed formcited by 254
- 2015Generative Moment Matching Networkscited by 252
- 2024Not All Language Model Features Are One-Dimensionally Linearcited by 201
- 2026Scaling Monosemanticity: Extracting Interpretable Features from Claude 3 Sonnetcited by 175
- 2016Linear Algebraic Structure of Word Senses, with Applications to Polysemycited by 165
- 2025Are Sparse Autoencoders Useful? A Case Study in Sparse Probingcited by 109
- 2024Steering Language Model Refusal with Sparse Autoencoderscited by 89
- 2025Understanding Reasoning in Thinking Language Models via Steering Vectorscited by 69
- 2024Controlling Language and Diffusion Models by Transporting Activationscited by 59
- 2025Steering Large Language Model Activations in Sparse Spacescited by 58
- 2024Representation Surgery: Theory and Practice of Affine Steeringcited by 47
- 2025Beyond Linear Steering: Unified Multi-Attribute Control for Language Modelscited by 23
- 2025The Blessing and Curse of Dimensionality in Safety Alignmentcited by 9
- 2025Fundamental Limits of Perfect Concept Erasurecited by 5
- 2025Kernel Density Steering: Inference-Time Scaling via Mode Seeking for Image Restorationcited by 5
- 2026Curveball Steering: The Right Direction To Steer Isn't Always Linearcited by 5
- 2025A Comparative Analysis of Sparse Autoencoder and Activation Difference in Language Model Steeringcited by 3
- 2026Concept Heterogeneity-aware Representation Steeringcited by 3
- 2025Nonlinear Concept Erasure: a Density Matching Approachcited by 2
Built on by
Not cited yet.