Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper introduces capability-gated deployment for language models, which allows for per-principal access control within a single set of model weights by utilizing a lattice structure to manage configurations. The authors demonstrate that while security measures can effectively compose to enhance safety, utility suffers from detrimental interactions among seemingly harmless profiles, leading to retention and fluency issues. Key findings reveal that while security can be strengthened through compositional strategies, utility does not benefit similarly, highlighting a critical trade-off in model deployment strategies.
Security measures can enhance language model safety through compositional strategies, but utility suffers from harmful interactions among benign profiles.
Deployed language model safeguards (safety fine-tuning, filtering, unlearning) vary by principal only outside the model weights: filters are reconfigured, tiers are multiplied, and artefacts are reissued; inside one set of weights every request meets the same model configuration. This motivates us to define capability-gated deployment: per-principal access control inside one set of weights, whose configurations form a lattice - meets accumulate a principal's restrictions and joins pool a coalition's reach. We instantiate it by sparse rank gating over an existing nested-factorisation mechanism, guide profile search with one-pass attribution, and read every result once from a pre-registered held-out split. Security composes: provably at meets under a monotone-elicitation assumption we falsify pointwise. In two lineages the median held-out meet deepens suppression; the one effect surviving correction strengthens it. Utility does not: individually harmless profiles can compose to retention and fluency damage, and no compositional bound exists.