Search papers, labs, and topics across Lattice.
New York University
2
0
3
A mere 1% of poisoned samples can flip classifier labels, leading to catastrophic false positives and negatives in jailbreak detection systems.
Steering a single direction in activation space can effectively control refusal behavior in reasoning models, even when the chain-of-thought is replaced with a compliant trace.
