{"id":"https://openalex.org/W7160906126","doi":"https://doi.org/10.48550/arxiv.2605.09314","title":"How LLMs Are Persuaded: A Few Attention Heads, Rerouted","display_name":"How LLMs Are Persuaded: A Few Attention Heads, Rerouted","publication_year":2026,"publication_date":"2026-05-10","ids":{"openalex":"https://openalex.org/W7160906126","doi":"https://doi.org/10.48550/arxiv.2605.09314"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.09314","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.09314","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.09314","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5108936963","display_name":"Xiangkun Sun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sun, Xiangkun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135927579","display_name":"Lingkai Kong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kong, Lingkai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135965976","display_name":"Aoqi Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Aoqi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135950676","display_name":"Liang Zeng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zeng, Liang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135933889","display_name":"Tonghan Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Tonghan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.2531000077724457,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.2531000077724457,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.15710000693798065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.14630000293254852,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/persuasion","display_name":"Persuasion","score":0.8985999822616577},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.6442999839782715},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5878000259399414},{"id":"https://openalex.org/keywords/mechanism","display_name":"Mechanism (biology)","score":0.5752999782562256},{"id":"https://openalex.org/keywords/perception","display_name":"Perception","score":0.48240000009536743},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.4740999937057495},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.4717999994754791},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.41999998688697815}],"concepts":[{"id":"https://openalex.org/C2781310500","wikidata":"https://www.wikidata.org/wiki/Q1231428","display_name":"Persuasion","level":2,"score":0.8985999822616577},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.6442999839782715},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5878000259399414},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.5752999782562256},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5504999756813049},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.48240000009536743},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.4740999937057495},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.4717999994754791},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.4472000002861023},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.41999998688697815},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3855000138282776},{"id":"https://openalex.org/C200873422","wikidata":"https://www.wikidata.org/wiki/Q5448821","display_name":"Filling-in","level":2,"score":0.373199999332428},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3702999949455261},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.35510000586509705},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.3508000075817108},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.3400999903678894},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.3276999890804291},{"id":"https://openalex.org/C188147891","wikidata":"https://www.wikidata.org/wiki/Q147638","display_name":"Cognitive science","level":1,"score":0.3122999966144562},{"id":"https://openalex.org/C2780695682","wikidata":"https://www.wikidata.org/wiki/Q4005959","display_name":"Jump","level":2,"score":0.30959999561309814},{"id":"https://openalex.org/C113336015","wikidata":"https://www.wikidata.org/wiki/Q574010","display_name":"Complete information","level":2,"score":0.27059999108314514},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C2781164615","wikidata":"https://www.wikidata.org/wiki/Q1291678","display_name":"Climate justice","level":3,"score":0.2621000111103058},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2581999897956848},{"id":"https://openalex.org/C80899671","wikidata":"https://www.wikidata.org/wiki/Q1304193","display_name":"Vertex (graph theory)","level":3,"score":0.2556999921798706},{"id":"https://openalex.org/C2780289543","wikidata":"https://www.wikidata.org/wiki/Q424630","display_name":"Accident (philosophy)","level":2,"score":0.2506999969482422}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.09314","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.09314","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.09314","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.09314","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.735819399356842,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Language":[0],"models":[1],"can":[2],"be":[3],"persuaded":[4],"to":[5,13,79,136],"abandon":[6],"factual":[7,31],"knowledge.":[8],"This":[9,158],"vulnerability":[10],"is":[11,154],"central":[12],"AI":[14],"safety,":[15],"but":[16],"its":[17],"internal":[18],"mechanism":[19,28,159],"remains":[20],"poorly":[21],"understood.":[22],"We":[23,83,107,130],"uncover":[24],"a":[25,52,71,109,137,176],"compact":[26],"causal":[27],"for":[29],"persuasion-induced":[30],"errors.":[32],"A":[33],"small":[34],"set":[35],"of":[36,139],"mid-layer":[37],"attention":[38,100,141],"heads":[39,47,87,142],"almost":[40],"entirely":[41],"determines":[42],"the":[43,76,80,115,122,133,150],"model's":[44,123],"answer.":[45],"These":[46],"write":[48],"answer":[49],"options":[50,56],"into":[51],"low-dimensional":[53],"polyhedron,":[54],"with":[55],"occupying":[57],"distinct":[58],"vertices.":[59],"Persuasion":[60,102],"does":[61],"not":[62,89],"blur":[63],"belief":[64],"or":[65],"merely":[66],"reduce":[67],"confidence;":[68],"it":[69,127,145],"causes":[70],"discrete":[72],"latent":[73],"jump":[74],"from":[75,146],"correct-answer":[77],"vertex":[78],"persuasion-target":[81],"vertex.":[82],"show":[84],"that":[85,113,143],"decision":[86],"are":[88],"reasoning":[90],"over":[91],"evidence.":[92],"Instead,":[93],"they":[94],"copy":[95],"whichever":[96],"option":[97],"token":[98],"their":[99],"selects.":[101],"works":[103],"by":[104,156],"redirecting":[105],"attention.":[106],"isolate":[108],"rank-one":[110],"evidence-routing":[111],"feature":[112,120,134],"controls":[114],"route.":[116],"Directly":[117],"modifying":[118],"this":[119],"steers":[121],"choice,":[124],"and":[125,164],"removing":[126],"blocks":[128],"persuasion.":[129],"then":[131],"trace":[132],"back":[135],"band":[138],"shallower":[140],"build":[144],"persuasive":[147],"keywords":[148],"in":[149],"input.":[151],"Every":[152],"step":[153],"validated":[155],"intervention.":[157],"appears":[160],"across":[161],"open-source":[162],"LLMs":[163],"realistic":[165],"poisoning":[166],"scenarios":[167],"such":[168],"as":[169,175],"Generative":[170],"Engine":[171],"Optimization,":[172],"revealing":[173],"persuasion":[174],"narrow,":[177],"monitorable":[178],"circuit.":[179]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-13T00:00:00"}