{"id":"https://openalex.org/W7154125404","doi":"https://doi.org/10.48550/arxiv.2604.09544","title":"Large Language Models Generate Harmful Responses Using a Distinct Mechanism, Shared Across Harm Types","display_name":"Large Language Models Generate Harmful Responses Using a Distinct Mechanism, Shared Across Harm Types","publication_year":2026,"publication_date":"2026-04-10","ids":{"openalex":"https://openalex.org/W7154125404","doi":"https://doi.org/10.48550/arxiv.2604.09544"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.09544","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.09544","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.09544","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017373229","display_name":"Hadas Orgad","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Orgad, Hadas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133524125","display_name":"Boyi Wei","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wei, Boyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133520689","display_name":"Kaden Zheng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zheng, Kaden","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039276358","display_name":"Martin Wattenberg","orcid":"https://orcid.org/0000-0003-0904-4862"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wattenberg, Martin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133547843","display_name":"Peter Henderson","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Henderson, Peter","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133512763","display_name":"Seraphina Goldfarb-Tarrant","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Goldfarb-Tarrant, Seraphina","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133543807","display_name":"Yonatan Belinkov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Belinkov, Yonatan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.49630001187324524,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.49630001187324524,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.13689999282360077,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.060600001364946365,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/harm","display_name":"Harm","score":0.7638000249862671},{"id":"https://openalex.org/keywords/pruning","display_name":"Pruning","score":0.5995000004768372},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5153999924659729},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5027999877929688},{"id":"https://openalex.org/keywords/mechanism","display_name":"Mechanism (biology)","score":0.4659999907016754},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.3734999895095825},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.3449999988079071},{"id":"https://openalex.org/keywords/intervention","display_name":"Intervention (counseling)","score":0.3422999978065491}],"concepts":[{"id":"https://openalex.org/C2777363581","wikidata":"https://www.wikidata.org/wiki/Q15098235","display_name":"Harm","level":2,"score":0.7638000249862671},{"id":"https://openalex.org/C108010975","wikidata":"https://www.wikidata.org/wiki/Q500094","display_name":"Pruning","level":2,"score":0.5995000004768372},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5497999787330627},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5153999924659729},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5027999877929688},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.4659999907016754},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.3734999895095825},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3481000065803528},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.3449999988079071},{"id":"https://openalex.org/C2780665704","wikidata":"https://www.wikidata.org/wiki/Q959298","display_name":"Intervention (counseling)","level":2,"score":0.3422999978065491},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.33799999952316284},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3188999891281128},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.3068000078201294},{"id":"https://openalex.org/C2777303404","wikidata":"https://www.wikidata.org/wiki/Q759757","display_name":"Convergence (economics)","level":2,"score":0.30630001425743103},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2766999900341034},{"id":"https://openalex.org/C2778152352","wikidata":"https://www.wikidata.org/wiki/Q5165061","display_name":"Content (measure theory)","level":2,"score":0.2727000117301941},{"id":"https://openalex.org/C188147891","wikidata":"https://www.wikidata.org/wiki/Q147638","display_name":"Cognitive science","level":1,"score":0.2703999876976013},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.26899999380111694},{"id":"https://openalex.org/C45493050","wikidata":"https://www.wikidata.org/wiki/Q7884934","display_name":"Unified Model","level":2,"score":0.2687999904155731},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2676999866962433},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.26159998774528503},{"id":"https://openalex.org/C2776825360","wikidata":"https://www.wikidata.org/wiki/Q1411921","display_name":"Vagueness","level":3,"score":0.259799987077713},{"id":"https://openalex.org/C180016635","wikidata":"https://www.wikidata.org/wiki/Q2712821","display_name":"Compression (physics)","level":2,"score":0.25110000371932983}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.09544","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.09544","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.09544","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.09544","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.758880615234375,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2,92],"(LLMs)":[3],"undergo":[4],"alignment":[5,106],"training":[6],"to":[7,58,196],"avoid":[8],"harmful":[9,70,108,128,161],"behaviors,":[10],"yet":[11],"the":[12,60,111,117],"resulting":[13],"safeguards":[14],"remain":[15],"brittle:":[16],"jailbreaks":[17],"routinely":[18],"bypass":[19],"them,":[20],"and":[21,86,170],"fine-tuning":[22,132],"on":[23,74],"narrow":[24,153],"domains":[25],"can":[26,140],"induce":[27],"``emergent":[28],"misalignment''":[29],"that":[30,69,80,105,133,186],"generalizes":[31],"broadly.":[32],"Whether":[33],"this":[34],"brittleness":[35,112],"reflects":[36],"a":[37,55,75,94,152,178,190],"fundamental":[38],"lack":[39],"of":[40,63,78,97,113,127],"coherent":[41,179],"internal":[42,61,180],"organization":[43,62],"for":[44,182,192],"harmfulness":[45,64,183],"remains":[46],"unclear.":[47],"Here":[48],"we":[49],"use":[50],"targeted":[51],"weight":[52],"pruning":[53,147],"as":[54,189],"causal":[56],"intervention":[57],"probe":[59],"in":[65,137,151,184],"LLMs.":[66],"We":[67],"find":[68],"content":[71],"generation":[72,99,149,162],"depends":[73],"compact":[76],"set":[77],"weights":[79,100,126,136,150],"are":[81,130],"general":[82],"across":[83],"harm":[84,98,148],"types":[85],"distinct":[87],"from":[88,166],"benign":[89],"capabilities.":[90],"Aligned":[91],"exhibit":[93],"greater":[95],"compression":[96,121],"than":[101],"unaligned":[102],"counterparts,":[103],"indicating":[104],"reshapes":[107],"representations":[109],"internally--despite":[110],"safety":[114],"guardrails":[115],"at":[116],"surface":[118],"level.":[119],"This":[120],"explains":[122],"emergent":[123,157],"misalignment:":[124],"if":[125],"capabilities":[129],"compressed,":[131],"engages":[134],"these":[135,175],"one":[138],"domain":[139,154],"trigger":[141],"broad":[142],"misalignment.":[143,158],"Consistent":[144],"with":[145],"this,":[146],"substantially":[155],"reduces":[156],"Notably,":[159],"LLMs":[160,185],"capability":[163],"is":[164],"dissociated":[165],"how":[167],"they":[168],"recognize":[169],"explain":[171],"such":[172],"content.":[173],"Together,":[174],"results":[176],"reveal":[177],"structure":[181],"may":[187],"serve":[188],"foundation":[191],"more":[193],"principled":[194],"approaches":[195],"safety.":[197]},"counts_by_year":[],"updated_date":"2026-07-08T06:17:01.165560","created_date":"2026-04-14T00:00:00"}