media Hugging Face Forums · 2d ago · src: 3d ago · open_models

Independent researcher seeks arXiv cs.CR endorsement for LLM safety case study

from English

An independent AI safety researcher based in West Bengal, India, is requesting a personal endorsement to submit a paper on arXiv under the cryptography and security category. The paper documents a case study of gradual, multi-turn conversational drift in large language model safety behavior, where sustained philosophical framing correlates with outputs inconsistent with stated guidelines.

The work focuses on cumulative conversational pressure rather than single-prompt attacks like LogiBreak or H-CoT. It is explicitly framed as a hypothesis-generating case study with acknowledged limitations, including being a single observer without controlled protocols or statistical analysis. The findings have been formally disclosed to Google’s VRP, CERT-In India, and CISA USA.

The author does not qualify for automatic endorsement due to lacking an institutional email or prior accepted arXiv papers, necessitating this public request for assistance.

Importance 1/3 Trust 1/3 Hugging Face Forums Research paper Safety & alignment

Read original

media Hugging Face Forums · 2d ago · 7 views

DISA proposes sparse internal monitoring to detect deceptive LLM computation

This article presents DISA (Dynamic Immune-Shunt Architecture), a conceptual research proposal for detecting potentially deceptive behavior in large language models through sparse internal monitoring rather than relying solely on observable output. The framework aims to address the risk that capable models might behave differently when they recognize they are being monitored.

arxiv arXiv cs.CL · 6d ago · 4 views

Single-direction attack on GLM-5.3-Flash reveals safety alignment fragility in MoE models

Researchers demonstrate that directional ablation, a white-box attack removing refusal by projecting out a single direction from weights, remains effective on frontier mixture-of-experts (MoE) models like GLM-5.3-Flash. The study shows that while the attack survives the architecture, its effects are distributed across attention, dense, and routed-expert writers rather than concentrated in one location.

media Hugging Face Forums · 14d ago · 16 views

ntrillard finds largest coordinates not driving Qwen2-1.5B logit steering

A causal investigation of vocabulary-logit steering on the Qwen2-1.5B model reveals that the largest coordinates in the steering vector are not necessarily responsible for the observed behavioral effects. The study, conducted by ntrillard, analyzes how sparse ranked logit steering influences token generation and identifies the specific structural components that drive these changes.

media Hugging Face Forums · 20d ago · 25 views

Gemma 4 baseline trace shows hallucination loop and self-report

A baseline trace of Gemma 4 with zero force cap reveals a persistent hallucination loop where the model generates a self-report of failure before entering a repetition well. The telemetry confirms that role-tag bleed and phrases like "STOPITSTOP" occur within this unstable state, mirroring patterns observed in Llama and Gemma 3 loaders since December 2025.

media Hugging Face Forums · 20d ago · 16 views

Study finds progressive representational structuring across depth in 8 open models

A new preprint analyzes hidden-state dynamics in eight locally instrumented small open Transformer models to determine if internal representations follow a structured progression during inference. The study distinguishes between changes occurring across model depth and those evolving over autoregressive generation time.