PulseAugur
EN
LIVE 08:06:59

New research reveals LLMs separate harmfulness from refusal

Researchers have identified that large language models (LLMs) encode the concept of harmfulness separately from their refusal mechanisms. This means an LLM might understand an instruction as harmful but still refuse to act on it. The study proposes a new dimension, 'harmfulness direction,' distinct from the existing 'refusal direction,' which can influence an LLM's interpretation of instructions. This discovery has led to the development of 'Latent Guard,' an intrinsic safeguard that uses the model's internal harmfulness representation to detect unsafe inputs and reduce over-refusals, performing comparably to dedicated safeguard models like Llama Guard-3-8B. AI

IMPACT This research offers a new perspective on AI safety by distinguishing harmfulness from refusal, potentially leading to more robust safeguards against unsafe content.

RANK_REASON Academic paper detailing a new finding about LLM internal representations. [lever_c_demoted from research: ic=1 ai=1.0]

Read on arXiv cs.CL →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

New research reveals LLMs separate harmfulness from refusal

COVERAGE [1]

  1. arXiv cs.CL TIER_1 English(EN) · Jiachen Zhao, Jing Huang, Zhengxuan Wu, David Bau, Weiyan Shi ·

    LLMs Encode Harmfulness and Refusal Separately

    arXiv:2507.11878v5 Announce Type: replace Abstract: LLMs are trained to refuse harmful instructions, but do they truly understand harmfulness beyond just refusing? Prior work has shown that LLMs' refusal behaviors can be mediated by a one-dimensional subspace, i.e., a refusal dir…