PulseAugur
EN
LIVE 09:18:19

New research reveals LLMs separate harmfulness from refusal

Researchers have identified that large language models (LLMs) encode the concept of harmfulness separately from their refusal mechanisms. This means an LLM might understand an instruction as harmful but still refuse to act on it. The study proposes a new dimension, 'harmfulness direction,' distinct from the existing 'refusal direction,' which can influence an LLM's interpretation of instructions. This discovery has led to the development of 'Latent Guard,' an intrinsic safeguard that uses the model's internal harmfulness representation to detect unsafe inputs and reduce over-refusals, performing comparably to dedicated safeguard models like Llama Guard-3-8B. AI

IMPACT This research offers a new perspective on AI safety by distinguishing harmfulness from refusal, potentially leading to more robust safeguards against unsafe content.

RANK_REASON Academic paper detailing a new finding about LLM internal representations. [lever_c_demoted from research: ic=1 ai=1.0]

Read on arXiv cs.CL →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

New research reveals LLMs separate harmfulness from refusal

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Academic paper detailing a new finding about LLM internal representations. [lever_c_demoted from research: ic=1 ai=1.0]
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
paper, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
52 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

Full methodology in our editorial standards.

COVERAGE [1]

  1. arXiv cs.CL TIER_1 English(EN) · Jiachen Zhao, Jing Huang, Zhengxuan Wu, David Bau, Weiyan Shi ·

    LLMs Encode Harmfulness and Refusal Separately

    arXiv:2507.11878v5 Announce Type: replace Abstract: LLMs are trained to refuse harmful instructions, but do they truly understand harmfulness beyond just refusing? Prior work has shown that LLMs' refusal behaviors can be mediated by a one-dimensional subspace, i.e., a refusal dir…