arXiv AI

CANS: Capability-Preserving Neuron Steering for Large Language Models

arXiv Computation and Language
Sep 3

GAPS: Dimension-Level Gates for Conditional Activation Steering

The paper introduces GAPS, a dimension‑level gating approach for activation steering in language models. GAPS uses two training‑free gates—a static separability gate based on AUROC and a dynamic posterior gate based on a Gaussian model—to selectively apply steering vectors only to neurons that carry reliable concept information or are currently mis‑activated. Experiments on Gemma‑3 and Qwen‑3 show that GAPS improves or matches the performance of token‑level methods, notably reducing Gemma‑3’s toxicity rate from 6.52% to 0.48% under a fixed capability budget.

By Moghis Fereidouni, Muhammad Umair Haider, Hassan Sajjad, A. B. Siddique
arXiv Machine Learning
Jun 15

Towards Steering without Sacrifice: Principled Training of Steering Vectors for Prompt-only Interventions

arXiv:2605. 05983v2 Announce Type: replace Abstract: Recently, steering vectors (SVs) have emerged as an effective and lightweight approach to steer behaviors of large language models (LLMs), among which fine-tuned SVs are more effective than optimization-free ones.

By Yuntai Bao, Qinfeng Li, Xinyan Yu, Ge Su, Wenqi Zhang, Liu Yan, Haiqin Weng, Jianwei Yin, Xuhong Zhang
arXiv Machine Learning
Jun 11

When is Your LLM Steerable?

arXiv:2606. 11599v1 Announce Type: cross Abstract: Activation steering offers a lightweight approach to control language models' behavior at inference time, but whether it succeeds or fails heavily depends on the prompt, concept, model, and steering configuration.

By Chenrui Fan, Yize Cheng, Ming Li, Soheil Feizi, Tianyi Zhou
arXiv AI
1d ago

UpSafe$^\circ$C: Upcycling for Controllable Safety in Large Language Models

UpSafe°C is a unified framework that enhances large language model safety by upcycling safety‑critical layers into a sparse Mixture‑of‑Experts structure, with a router acting as a soft guardrail. It employs a two‑stage supervised fine‑tuning strategy to improve safety discrimination while preserving general capabilities, and introduces a safety temperature mechanism for dynamic inference‑time control of the safety‑utility trade‑off. Experiments across multiple benchmarks and model scales show robust safety improvements against harmful and jailbreak inputs while maintaining competitive general performance.

By Yuhao Sun, Zhuoer Xu, Shiwen Cui, Kun Yang, Lingyun Yu, Yongdong Zhang, Hongtao Xie
arXiv Computation and Language
Oct 21

RealControlBench: A Benchmark for Interpretability-Informed Fine-Grained Control of LLMs and Agents

RealControlBench is a new benchmark that evaluates fine‑grained steering of large language models and agents across diverse behavioral targets and interaction settings. It extends beyond isolated generation tasks to include complex, execution‑grounded, multi‑turn agent interactions, covering instruction‑following control, tool‑use decision control, reasoning performance, reasoning length, and safety awareness. The benchmark jointly measures target controllability and capability preservation, testing robustness across prompts, domains, and model architectures, and finds that current steering methods are often unreliable in realistic scenarios.

By Xinying Cai, Bin Hu, Mingyu Jin, Qiming Zhang, Yang Ouyang, Bangwei Guo, Minghao Guo, Yutong Yin, Lang Gao, Feijiang Han, Sheldon Yu, Kaiqu Liang, Qingcheng Zeng, Jingcheng Niu, Fan Yang, Wei Cheng, Zhen Xiang, Julian McAuley, Zhaoran Wang