Genesis Steering: Better Activation Steering Through Training Data
On the map: Mechanistic interpretability → Activation steering methods
Abstract (arXiv)
Activation steering controls large language models at inference time, but its effectiveness depends on the choice of reference data. We introduce genesis steering, which derives a genesis vector from contrastive examples in the model's own fine-tuning data. When these data are unavailable, we draw on the membership inference literature to identify likely training examples and construct a proxy dataset. We establish two theoretical results on optimal displacement to the decision boundary and reduced proxy-estimation bias. We evaluate genesis steering and membership-based proxy construction on T"ulu-3-8B, whose fine-tuning data are publicly available, and Llama-3.1-8B-Instruct as a control. We find that safety data from T"ulu-3-8B's training mixture yield stronger steering than external datasets on both models. On T"ulu-3-8B, membership scores largely agree in identifying training examples, and vectors built from top-ranked examples achieve competitive performance against random subsets of the same size. In contrast, the results on Llama-3.1-8B-Instruct hint that a MIA method will only have a positive effect if the mean direction shift with MIA-filtered in-distribution data is much less severe than the direction shift with OoD data.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Activation steering methods, one of 13 directions in Mechanistic interpretability. Builds on 37 of its 49 references that are in the map. First posted on arXiv 13 Oct 2026.
Builds on
37 of 49 references.
Closest ancestors · 6
Same direction, newest first
- 2026Where Steering Signals Come From: Activation Source Selection in Activation Steering28 Jul
- 2025Understanding (Un)Reliability of Steering Vectors in Language Models28 May
- 2025A Unified Understanding and Evaluation of Steering Methods4 Feb
- 2024Personalized Steering of Large Language Models: Versatile Steering Vectors Through Bi-directional Preference Optimization28 May
- 2023Steering Llama 2 via Contrastive Activation Addition9 Dec
- 2023Steering Language Models With Activation Engineering20 Aug
Other references · 31
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
- 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,302
- 2024Tulu 3: Pushing Frontiers in Open Language Model Post-Trainingcited by 1,053
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 496
- 2025Persona Vectors: Monitoring and Controlling Character Traits in Language Modelscited by 345
- 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preferencecited by 261
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 258
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Modelscited by 244
19 more
- 2025AxBench: Steering LLMs? Even Simple Baselines Outperform Sparse Autoencoderscited by 218
- 2024ReFT: Representation Finetuning for Language Modelscited by 197
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attackscited by 175
- 2025The Geometry of Refusal in Large Language Models: Concept Cones and Representational Independencecited by 115
- 2024The Art of Saying No: Contextual Noncompliance in Language Modelscited by 105
- 2024Steering Language Model Refusal with Sparse Autoencoderscited by 95
- 2025LLMs Encode Harmfulness and Refusal Separatelycited by 88
- 2021Contrastive Out-of-Distribution Detection for Pretrained Transformerscited by 71
- 2021Revisiting Mahalanobis Distance for Transformer-Based Out-of-Domain Detectioncited by 70
- 2024ReCaLL: Membership Inference via Relative Conditional Log-Likelihoodscited by 64
- 2024SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)cited by 59
- 2025Angular Steering: Behavior Control via Rotation in Activation Spacecited by 53
- 2025Multi-Attribute Steering of Language Models via Targeted Interventioncited by 46
- 2026There Is More to Refusal in Large Language Models than a Single Directioncited by 26
- 2026The Cylindrical Representation Hypothesis for Language Model Steeringcited by 5
- 2026Benchmarking and Improving Monitors for Out-Of-Distribution Alignment Failure in LLMscited by 4
- 2026Surgical Refusal Ablation: Disentangling Safety from Intelligence via Concept-Guided Spectral Cleaningcited by 2
- 2026Scaling Pretrained Representations Enables Label-Free Out-of-Distribution Detection Without Fine-Tuningcited by 1
- 2026Beyond Shallow Alignment: How Post-Training Methods Determine Refusal Circuits And Steering Robustnesscited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Steering When Necessary: Flexible Steering Large Language Models with Backtracking
- 2026COLD-Steer: Steering Large Language Models via In-Context One-step Learning Dynamics
- 2026Deployable Per-Instance Multi-Layer Activation Steering for Large Language Models
- 2026Does Steering Break Your Model? A Multi-Dimensional Evaluation Suite for LLM Steering Methods
- 2026Beyond Steering Vector: Flow-based Activation Steering for Inference-Time Intervention
- 2026On the Non-Identifiability of Steering Vectors in Large Language Models
- 2026Mechanistic Indicators of Steering Effectiveness in Large Language Models
- 2026Where to Steer: Input-Dependent Layer Selection for Steering Improves LLM Alignment