WRDO learns weighted directions to change LLM refusal behavior
The method is tested on three open-weight models with HarmBench and can also be reversed to restore refusal.
5 stories, newest first · one card per story
The method is tested on three open-weight models with HarmBench and can also be reversed to restore refusal.
Ten arms trained on about 53k dual-labeled prompts show HarmBench-copyright scores spanning 0-100 while detection stays unchanged.
Authors report up to 0.898 StrongREJECT and 89.23% HarmBench success on five open-weight models; code is public.
A new paper reports a query-efficient jailbreak method with 89.8% HarmBench success in 10 queries.
A psychometric audit finds HarmBench and HELM Safety do not isolate a single harmful-refusal attribute.
Today 840 readers · 1.1K views · 843 reads · all time 159K views