{"id":"https://openalex.org/W7138461266","doi":"https://doi.org/10.48550/arxiv.2603.14278","title":"Activation Surgery: Jailbreaking White-box LLMs without Touching the Prompt","display_name":"Activation Surgery: Jailbreaking White-box LLMs without Touching the Prompt","publication_year":2026,"publication_date":"2026-03-15","ids":{"openalex":"https://openalex.org/W7138461266","doi":"https://doi.org/10.48550/arxiv.2603.14278"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.14278","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.14278","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.14278","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114470196","display_name":"Ma\u00ebl Jenny","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jenny, Ma\u00ebl","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5099054966","display_name":"J\u00e9r\u00e9mie Dentan","orcid":"https://orcid.org/0009-0001-5561-8030"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dentan, J\u00e9r\u00e9mie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129692213","display_name":"Sonia Vanier","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vanier, Sonia","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5085266102","display_name":"Micha\u00ebl Krajecki","orcid":"https://orcid.org/0000-0001-8419-1948"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Krajecki, Micha\u00ebl","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.41909998655319214,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.41909998655319214,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.1882999986410141,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.12890000641345978,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.41269999742507935},{"id":"https://openalex.org/keywords/trajectory","display_name":"Trajectory","score":0.4115000069141388},{"id":"https://openalex.org/keywords/internal-model","display_name":"Internal model","score":0.33009999990463257},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.25999999046325684}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5346999764442444},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.41269999742507935},{"id":"https://openalex.org/C13662910","wikidata":"https://www.wikidata.org/wiki/Q193139","display_name":"Trajectory","level":2,"score":0.4115000069141388},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.3725000023841858},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3497999906539917},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.33340001106262207},{"id":"https://openalex.org/C28427503","wikidata":"https://www.wikidata.org/wiki/Q13580300","display_name":"Internal model","level":3,"score":0.33009999990463257},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.3206000030040741},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3009999990463257},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.288100004196167},{"id":"https://openalex.org/C46312422","wikidata":"https://www.wikidata.org/wiki/Q11024","display_name":"Communication","level":1,"score":0.2809000015258789},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2736000120639801},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.25999999046325684},{"id":"https://openalex.org/C169760540","wikidata":"https://www.wikidata.org/wiki/Q207011","display_name":"Neuroscience","level":1,"score":0.25929999351501465},{"id":"https://openalex.org/C90559484","wikidata":"https://www.wikidata.org/wiki/Q778379","display_name":"Expression (computer science)","level":2,"score":0.25850000977516174}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.14278","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.14278","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.14278","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.14278","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.40963447093963623,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Most":[0],"jailbreak":[1],"techniques":[2,21],"for":[3,123],"Large":[4],"Language":[5],"Models":[6],"(LLMs)":[7],"primarily":[8],"rely":[9],"on":[10],"prompt":[11,80],"modifications,":[12],"including":[13],"paraphrasing,":[14],"obfuscation,":[15],"or":[16],"conversational":[17],"strategies.":[18],"Meanwhile,":[19],"abliteration":[20],"(also":[22],"known":[23],"as":[24],"targeted":[25],"ablations":[26],"of":[27,56],"internal":[28,42,63],"components)":[29],"have":[30],"been":[31],"used":[32],"to":[33,65],"study":[34],"and":[35,81,99,103,126],"explain":[36],"LLM":[37],"outputs":[38],"by":[39,58],"probing":[40],"which":[41],"structures":[43],"causally":[44],"support":[45],"particular":[46],"responses.":[47],"In":[48],"this":[49,93],"work,":[50],"we":[51,118],"combine":[52],"these":[53],"two":[54],"lines":[55],"research":[57],"directly":[59],"manipulating":[60],"the":[61,72,113,120],"model's":[62,114],"activations":[64],"alter":[66],"its":[67],"generation":[68],"trajectory":[69],"without":[70],"changing":[71],"prompt.":[73],"Our":[74],"method":[75,96],"constructs":[76],"a":[77,87],"nearby":[78],"benign":[79],"performs":[82],"layer-wise":[83],"activation":[84,94],"substitutions":[85],"using":[86],"sequential":[88],"procedure.":[89],"We":[90],"show":[91],"that":[92],"surgery":[95],"reveals":[97],"where":[98],"how":[100],"refusal":[101,105],"arises,":[102],"prevents":[104],"signals":[106],"from":[107],"propagating":[108],"across":[109],"layers,":[110],"thereby":[111],"inhibiting":[112],"safety":[115],"mechanisms.":[116],"Finally,":[117],"discuss":[119],"security":[121],"implications":[122],"open-weights":[124],"models":[125],"instrumented":[127],"inference":[128],"environments.":[129]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-18T00:00:00"}