Research · Safety & security
Pretrained LLMs already contain refusal circuits that shift during alignment
SafeEvo: Deciphering the Safety Alignment Mechanism and Evolution in Language Models
SafeEvo identifies sparse refusal circuits in base models, traces their structural drift across safety checkpoints, and uses them to improve fine-tuning.
HarmBench: 2.29 pts average ASR reduction (as reported)
The University of Hong Kong, Chinese Academy of Sciences, Information Engineering University