Jailbreak Attack Initializations as Extractors of Compliance Directions
DGX agentarXiv:2502.09755v4 Announce Type: replace-cross Abstract: Safety-aligned LLMs respond to prompts with either compliance or refusal, each corresponding to distinct directions in the model's activation