STR: Supervised Transcoder Replacement for Reducing Steering Side Effects
cs.AI, cs.LG
Submitted: 2026-09-26
Updated: 2026-09-26
License: http://creativecommons.org/licenses/by/4.0/
The gist: Model steering can strengthen a target behavior while degrading other useful behaviors.
Terminology
Abstract
Model steering can strengthen a target behavior while degrading other useful behaviors. We introduce Supervised Transcoder Replacement (STR) to reduce these side effects for existing steering methods, including those fitted without a protection objective. STR learns a replacement for the multilayer perceptron (MLP) computation at the steering layer through supervision for target control, non-target preservation, and fidelity without steering. Selected steering methods then fit directions on the frozen replacement while retaining their own fitting objectives. We evaluate three steering methods across Gemma and Llama models using Corrigibility preferences and four harmful-request safety datasets. SALAD-Bench supplies protection training data and a separate in-distribution evaluation split; HarmBench, AdvBench, and StrongREJECT are reserved for out-of-distribution testing. STR substantially reduces steering side effects on the in-distribution evaluation and extends this protection to the unseen safety datasets while retaining effective target control. For target-only supervised steering vectors, pooled out-of-distribution attack success rate falls from 42.46% to 14.42% on Gemma-3-4B and from 34.97% to 12.91% on Gemma-3-12B. These results show that replacement training can benefit steering methods fitted without protection objectives.
Sources
- OPIUM: Mitigating Steering Externalities and Over-Refusal via Dual Objective Latent Optimization
- Improving Steering Vectors by Targeting Sparse Autoencoder Features
- Sparse Autoencoders Find Highly Interpretable Features in Language Models
- Transcoders Find Interpretable LLM Feature Circuits
- Gemma 3 Technical Report
- The Llama 3 Herd of Models
- The Rogue Scalpel: Activation Steering Compromises LLM Safety
- HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal
- Forecasting Side Effects of Activation Steering
- Discovering Language Model Behaviors with Model-Written Evaluations
- Jumping Ahead: Improving Reconstruction Fidelity with JumpReLU Sparse Autoencoders
- A StrongREJECT for Empty Jailbreaks
- Steering Language Models With Activation Engineering
- Steering Externalities: Benign Activation Steering Unintentionally Increases Jailbreak Risk for Large Language Models
- Qwen3 Technical Report
- Representation Engineering: A Top-Down Approach to AI Transparency
- Universal and Transferable Adversarial Attacks on Aligned Language Models
Related papers
- MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
- Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
- Agents' Last Exam
- The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
- MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
- Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems