Does Steering Break Your Model? A Multi-Dimensional Evaluation Suite for LLM Steering Methods
cs.CL
Submitted: 2026-10-06
Updated: 2026-10-06
Code: https://github.com/yht0511/steerscope
License: http://creativecommons.org/licenses/by/4.0/
The gist: Activation steering provides a lightweight and flexible way to control large language model (LLM) behavior.
Terminology
Abstract
Activation steering provides a lightweight and flexible way to control large language model (LLM) behavior. However, effective steering requires more than inducing the intended behavior: it should also limit unintended changes and remain robust across inputs and training data. Existing evaluations cover these dimensions only in fragments. As a result, the trade-offs between efficacy and side effects have not been systematically characterized. We introduce SteerScope, a two-axis, multi-dimensional evaluation suite that jointly characterizes steering outcomes and method properties through 15 metrics. We score target efficacy and side effects on language quality, task capabilities, and safety and reliability, and further assess generalization and data dependence through steering-specific metrics for sample efficiency and sample sensitivity. Rather than comparing methods at a single operating point, we characterize the trade-offs between efficacy and side effects. Under matched models, tasks, and evaluation protocols, we benchmark 23 methods spanning 4 families, including prompting, LoRA, and SFT as baseline methods, and release the suite as an extensible codebase. We find that current activation steering methods do not yet surpass the Prompt Steering baseline in their overall balance between steering efficacy and side effects: across both model scales, no evaluated activation steering method achieves higher efficacy without incurring greater composite side effects. We further uncover a consistent coupling between steering efficacy and side effects. Under OOD prompts, target efficacy is often preserved, whereas side effects tend to become more pronounced, particularly through declines in instruction relevance and fluency. Methods also exhibit sharply different sample-efficiency profiles.
Sources
- Towards Unifying Interpretability and Control: Evaluation via Intervention
- Conditional Optimal Bridge for Riemannian Activation Steering
- DeepSeek-V3.2: Pushing the Frontier of Open Large Language Models
- FaithSteer-BENCH: A Deployment-Aligned Stress-Testing Benchmark for Inference-Time Steering
- Gemma 2: Improving Open Language Models at a Practical Size
- ORBIT: Training-Free Multi-Attribute Behavioral Steering via Orthogonal Subspace Rotation
- The Llama 3 Herd of Models
- Contextual Linear Activation Steering of Language Models
- Global Evolutionary Steering: Refining Activation Steering Control via Cross-Layer Consistency
- Beyond Steering Vector: Flow-based Activation Steering for Inference-Time Intervention
- Manifold-Guided Attention Steering
- Steering Vector Fields for Context-Aware Inference-Time Control in Large Language Models
- Beyond Linear Activation Steering: Invertible Latent Transformations for Controlling LLM Behavior
- High-Dimensional Random Projection for Activation Steering in Language Models
- Curveball Steering: The Right Direction To Steer Isn't Always Linear
- UniSteer: Text-Guided Flow Matching in Activation Space for Versatile LLM Steering
- Mind the Performance Gap: Capability-Behavior Trade-offs in Feature Steering
- HyperSteer: Activation Steering at Scale with Hypernetworks
- Steering Language Models With Activation Engineering
- Instruction-Following Evaluation for Large Language Models
Related papers
- Exploring Solution Divergence and Its Effect on Large Language Model Problem Solving
- Ishigaki-IDS-Bench: A Benchmark for Generating Information Delivery Specification from BIM Information Requirements
- Subliminal Steering: Stronger Encoding of Hidden Signals
- MedStruct-S: A Benchmark for Key Discovery, Key-Conditioned QA and Semi-Structured Extraction from OCR Clinical Reports
- The End of Transformers? On Challenging Attention and the Rise of Sub-Quadratic Architectures
- Untangling the Mechanisms of Misleading Context in Medical Question Answering