{"id":"https://openalex.org/W7081628810","doi":"https://doi.org/10.48550/arxiv.2509.09708","title":"Beyond I'm Sorry, I Can't: Dissecting Large Language Model Refusal","display_name":"Beyond I'm Sorry, I Can't: Dissecting Large Language Model Refusal","publication_year":2025,"publication_date":"2025-09-07","ids":{"openalex":"https://openalex.org/W7081628810","doi":"https://doi.org/10.48550/arxiv.2509.09708"},"language":"en","primary_location":{"id":"doi:10.48550/arxiv.2509.09708","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2509.09708","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2509.09708","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Prakash, Nirmalendu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Prakash, Nirmalendu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Jie, Yeo Wei","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jie, Yeo Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Abdullah, Amir","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Abdullah, Amir","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Satapathy, Ranjan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Satapathy, Ranjan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Cambria, Erik","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cambria, Erik","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":null,"display_name":"Lee, Roy Ka Wei","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lee, Roy Ka Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.3165000081062317,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.3165000081062317,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.1868000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.14640000462532043,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5698999762535095},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.510200023651123},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5095000267028809},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4377000033855438},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.40939998626708984},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.4083999991416931},{"id":"https://openalex.org/keywords/intervention","display_name":"Intervention (counseling)","score":0.36959999799728394},{"id":"https://openalex.org/keywords/space","display_name":"Space (punctuation)","score":0.3684999942779541}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6055999994277954},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5698999762535095},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5619999766349792},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.510200023651123},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5095000267028809},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4494999945163727},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4377000033855438},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.4189000129699707},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.40939998626708984},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.4083999991416931},{"id":"https://openalex.org/C2780665704","wikidata":"https://www.wikidata.org/wiki/Q959298","display_name":"Intervention (counseling)","level":2,"score":0.36959999799728394},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.3684999942779541},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.35249999165534973},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.3521000146865845},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.33309999108314514},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.3027999997138977},{"id":"https://openalex.org/C51823790","wikidata":"https://www.wikidata.org/wiki/Q504353","display_name":"Greedy algorithm","level":2,"score":0.2969000041484833},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2944999933242798},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.28870001435279846},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2824000120162964},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.2818000018596649},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.2653999924659729},{"id":"https://openalex.org/C11671645","wikidata":"https://www.wikidata.org/wiki/Q5054567","display_name":"Causal model","level":2,"score":0.2653000056743622},{"id":"https://openalex.org/C64357122","wikidata":"https://www.wikidata.org/wiki/Q1149766","display_name":"Causality (physics)","level":2,"score":0.26499998569488525},{"id":"https://openalex.org/C2780522230","wikidata":"https://www.wikidata.org/wiki/Q1140419","display_name":"Ambiguity","level":2,"score":0.2612000107765198},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.25440001487731934}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2509.09708","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2509.09708","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2509.09708","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2509.09708","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7999899387359619}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Refusal":[0,78],"on":[1,39],"harmful":[2,44],"prompts":[3],"is":[4],"a":[5,43,69,81,96,104,124],"key":[6],"safety":[7,165],"behaviour":[8,21],"in":[9,74,164],"instruction-tuned":[10,29],"large":[11],"language":[12],"models":[13],"(LLMs),":[14],"yet":[15],"the":[16,48,58,113,118,133,156,169],"internal":[17],"causes":[18],"of":[19,127,136,142],"this":[20],"remain":[22,146],"poorly":[23],"understood.":[24],"We":[25],"study":[26],"two":[27],"public":[28],"models,":[30],"Gemma-2-2B-IT":[31],"and":[32,67,84,99,117,161],"LLaMA-3.1-8B-IT,":[33],"using":[34],"sparse":[35],"autoencoders":[36],"(SAEs)":[37],"trained":[38],"residual-stream":[40],"activations.":[41],"Given":[42],"prompt,":[45],"we":[46,139],"search":[47,72],"SAE":[49,86],"latent":[50,171],"space":[51],"for":[52,158],"feature":[53],"sets":[54],"whose":[55],"ablation":[56],"flips":[57],"model":[59],"from":[60],"refusal":[61],"to":[62,95],"compliance,":[63],"demonstrating":[64],"causal":[65],"influence":[66],"creating":[68],"jailbreak.":[70],"Our":[71,153],"proceeds":[73],"three":[75],"stages:":[76],"(1)":[77],"Direction:":[79],"find":[80,140],"refusal-mediating":[82],"direction":[83],"collect":[85],"features":[87,116,144,150],"near":[88],"that":[89,108,145],"direction;":[90],"(2)":[91],"Greedy":[92],"Filtering:":[93],"prune":[94],"minimal":[97,119],"set;":[98],"(3)":[100],"Interaction":[101],"Discovery:":[102],"fit":[103],"factorization":[105],"machine":[106],"(FM)":[107],"captures":[109],"nonlinear":[110],"interactions":[111],"among":[112],"remaining":[114],"active":[115],"set.":[120],"This":[121],"pipeline":[122],"yields":[123],"broad":[125],"set":[126],"jailbreak-critical":[128],"features,":[129],"offering":[130],"insight":[131],"into":[132],"mechanistic":[134],"basis":[135],"refusal.":[137],"Moreover,":[138],"evidence":[141],"redundant":[143],"dormant":[147],"unless":[148],"earlier":[149],"are":[151],"suppressed.":[152],"findings":[154],"highlight":[155],"potential":[157],"fine-grained":[159],"auditing":[160],"targeted":[162],"intervention":[163],"behaviours":[166],"by":[167],"manipulating":[168],"interpretable":[170],"space.":[172]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2025-10-10T00:00:00"}