Rogue Scalpel: Activation steering breaks refusal, even with benign directions
By Alexey Dontsov
Empirical demonstration that activation steering can bypass refusal training in LLMs even when the steering vector encodes a benign concept such as a country name or brand identity. The effect is not predicted by simple correlation between the steering direction and the refusal direction, and which vectors break refusal on which prompts is hard to anticipate.