Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
Another 261 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
提出基于决策前隐藏状态的检测与引导，预测并抑制智能体欺骗
Published Oct 5
Evaluated models Qwen3-14B Abstract 论文展示了智能体自发欺骗可在行为显现前由内部表征预测，并通过激活引导证实了表征的行为可操作性。
提出 TrustMI，用激活转向因果调控助手对用户主张的信任
Published Oct 5
Evaluated models Qwen3.5-9B , Qwen3.5-27B , Llama-3.1-8B-Instruct and others6 Abstract 作者用 BiPO 转向调控助手对用户的依赖，并称该效应迁移到智能体安全任务。TrustMI 研究助手对用户的信任能否沿激活中的线性方向被因果调控，以及这种调控会不会改变安全相关的智能体行为。
用 J-lens 检测辩论中屈从多数的智能体是否仍内部表征原前提
Published Oct 2
Evaluated models Qwen3.5-4B , Qwen3.6-27B , Gemma-4-E4B-it and others4 Abstract 揭示 LLM 智能体屈从多数时内部仍表征原推理前提，指出辩论表态共识可能夸大真实认同。
提出 SAKIKO，审计工具调用模型的激活干预是否构成修复
Published Sep 29
Evaluated models Phi-3.5-mini , Qwen2.5-7B , Llama-3.1-8B and others8 Abstract SAKIKO 用目的地、保持和预注册不确定性裁定内部转向是否算修复。SAKIKO 审计工具型 LLM 在执行前 K 路动作上的内部干预：行为净增益、到达正确动作、保住原本正确的决策、以及统计证据充分，是四件分开的事。
用 abliteration 消融代码 LLM 拒答方向，分离拒答与漏洞注入能力
Published Jun 4
Evaluated models Qwen2.5-Coder-Instruct 3B , Qwen2.5-Coder-Instruct 7B , Qwen2.5-Coder-Instruct 14B Abstract 拒答可用低秩编辑去掉，CWE-89 注入是否成功仍由模型规模决定。这项初步可行性研究用 abliteration 把代码 LLM 的拒答和 CWE 注入能力拆开：意愿可以被低秩编辑解锁，注入是否成功仍看参数规模。
You have reached the end