Component and Dimension Sparsity in Transformer Refusal Mechanisms
cs.CL, cs.AI, cs.LG
Submitted: 2026-09-30
Updated: 2026-09-30
Comments: Accepted to COLM 2026
Code: https://github.com/wangresearch-lab/Refusal
License: http://creativecommons.org/licenses/by/4.0/
The gist: Activation steering manipulates large language model behavior by intervening on internal activations, but the mechanistic basis of these interventions remains poorly understood.
Terminology
Abstract
Activation steering manipulates large language model behavior by intervening on internal activations, but the mechanistic basis of these interventions remains poorly understood. We decompose refusal steering into component-level interventions across four open-weight models, identifying the sparse subsets of attention and MLP components whose steering suffices to reproduce the full behavioral effect. We find that refusal directions concentrate in sparse component mechanisms comprising 28--48% of upstream components, retaining 88--101% of steering effectiveness. Within these mechanisms, effective steering further concentrates in approximately 50% of residual stream dimensions, retaining 85--98% of the component-mechanism baseline, consistent with a privileged basis structure. Sparsity thus operates at two levels: which components are steered, and which dimensions within those components carry the signal. Together these findings show that refusal is not diffusely encoded across a transformer but assembled by a structured, identifiable mechanism, providing a foundation for mechanistic understanding of how refusal behaviors are represented and steered. To facilitate reproducibility, we release all code and raw experimental results in https://github.com/wang-research-lab/Refusal Mechanisms.
Sources
- Phi-4 Technical Report
- Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks
- Estimating or Propagating Gradients Through Stochastic Neurons for Conditional Computation
- Jailbreaking Black Box Large Language Models in Twenty Queries
- Towards Automated Circuit Discovery for Mechanistic Interpretability
- Toy Models of Superposition
- Localizing Model Behavior with Path Patching
- The Llama 3 Herd of Models
- Finding Neurons in a Haystack: Case Studies with Sparse Probing
- How to use and interpret activation patching
- Spectral Superposition: A Theory of Feature Geometry
- Programming Refusal with Conditional Activation Steering
- LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70B
- Does Circuit Analysis Interpretability Scale? Evidence from Multiple Choice Capabilities in Chinchilla
- Refusal in LLMs is an Affine Function
- Locating and Editing Factual Associations in GPT
- Steering Llama 2 via Contrastive Activation Addition
- RepIt: Steering Language Models with Concept-Specific Refusal Vectors
- Gemma 2: Improving Open Language Models at a Practical Size
- Steering Language Models With Activation Engineering
Related papers
- Exploring Solution Divergence and Its Effect on Large Language Model Problem Solving
- Ishigaki-IDS-Bench: A Benchmark for Generating Information Delivery Specification from BIM Information Requirements
- Subliminal Steering: Stronger Encoding of Hidden Signals
- MedStruct-S: A Benchmark for Key Discovery, Key-Conditioned QA and Semi-Structured Extraction from OCR Clinical Reports
- The End of Transformers? On Challenging Attention and the Rise of Sub-Quadratic Architectures
- Untangling the Mechanisms of Misleading Context in Medical Question Answering