{"id":"https://openalex.org/W7162509989","doi":"https://doi.org/10.48550/arxiv.2605.26772","title":"Beyond a Single Direction: Chain-of-Thought Disrupts Simple Steering of Refusal","display_name":"Beyond a Single Direction: Chain-of-Thought Disrupts Simple Steering of Refusal","publication_year":2026,"publication_date":"2026-05-26","ids":{"openalex":"https://openalex.org/W7162509989","doi":"https://doi.org/10.48550/arxiv.2605.26772"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.26772","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.26772","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.26772","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5129414721","display_name":"Kia-Jung Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Kia-J\u00fcng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137091290","display_name":"Dominik Meier","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Meier, Dominik","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029412635","display_name":"Jiachen Zhao","orcid":"https://orcid.org/0000-0002-2864-9229"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Jiachen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062790326","display_name":"Terry Ruas","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ruas, Terry","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137148929","display_name":"Bela Gipp","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gipp, Bela","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.10620000213384628,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.10620000213384628,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11883","display_name":"Embodied and Extended Cognition","score":0.09560000151395798,"subfield":{"id":"https://openalex.org/subfields/2805","display_name":"Cognitive Neuroscience"},"field":{"id":"https://openalex.org/fields/28","display_name":"Neuroscience"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T10985","display_name":"Sleep and Wakefulness Research","score":0.06880000233650208,"subfield":{"id":"https://openalex.org/subfields/2805","display_name":"Cognitive Neuroscience"},"field":{"id":"https://openalex.org/fields/28","display_name":"Neuroscience"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.482699990272522},{"id":"https://openalex.org/keywords/signal","display_name":"SIGNAL (programming language)","score":0.47909998893737793},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.46950000524520874},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4009999930858612},{"id":"https://openalex.org/keywords/control-theory","display_name":"Control theory (sociology)","score":0.40049999952316284},{"id":"https://openalex.org/keywords/residual","display_name":"Residual","score":0.3707999885082245}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6096000075340271},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.482699990272522},{"id":"https://openalex.org/C2779843651","wikidata":"https://www.wikidata.org/wiki/Q7390335","display_name":"SIGNAL (programming language)","level":2,"score":0.47909998893737793},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.46950000524520874},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4009999930858612},{"id":"https://openalex.org/C47446073","wikidata":"https://www.wikidata.org/wiki/Q5165890","display_name":"Control theory (sociology)","level":3,"score":0.40049999952316284},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.3707999885082245},{"id":"https://openalex.org/C2780665704","wikidata":"https://www.wikidata.org/wiki/Q959298","display_name":"Intervention (counseling)","level":2,"score":0.37040001153945923},{"id":"https://openalex.org/C18555067","wikidata":"https://www.wikidata.org/wiki/Q8375051","display_name":"Joint (building)","level":2,"score":0.3619000017642975},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.3456000089645386},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.3370000123977661},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.33570000529289246},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.27090001106262207},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.26579999923706055},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.26260000467300415},{"id":"https://openalex.org/C46312422","wikidata":"https://www.wikidata.org/wiki/Q11024","display_name":"Communication","level":1,"score":0.25450000166893005}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.26772","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.26772","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.26772","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.26772","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"reasoning":[1,40],"models":[2,41],"(LRMs)":[3,42],"generate":[4],"chain-of-thought":[5],"(CoT)":[6],"traces":[7],"before":[8],"producing":[9],"final":[10],"outputs,":[11],"introducing":[12],"a":[13,33,82,160],"dynamic":[14],"internal":[15],"state":[16],"that":[17,75,118,132],"may":[18],"complicate":[19],"control":[20],"mechanisms":[21],"such":[22],"as":[23],"refusal.":[24,80],"Unlike":[25],"instruction-tuned":[26],"LLMs,":[27],"where":[28,85],"refusal":[29,37,53,94,133],"is":[30,62,95,114,136],"mediated":[31],"by":[32],"single":[34],"directional":[35],"subspace,":[36],"in":[38,54,97,134,139],"large":[39],"additionally":[43],"depends":[44],"on":[45],"the":[46,60,67,76,86,102,119,125],"CoT.":[47,144],"In":[48,81],"DeepSeek-R1-Distill-LLaMA-8B,":[49],"activation":[50,92,147],"steering":[51,113],"reverses":[52],"only":[55],"39%":[56],"of":[57,99,108],"cases":[58],"when":[59],"CoT":[61,68,77,90,104,120,158],"kept":[63],"fixed,":[64],"but":[65,156],"removing":[66],"entirely":[69],"increases":[70],"this":[71,109],"to":[72,159],"70%,":[73],"indicating":[74],"actively":[78],"reinforces":[79],"two-stage":[83],"intervention":[84],"model":[87],"regenerates":[88],"its":[89],"under":[91],"steering,":[93],"reversed":[96],"94%":[98],"cases,":[100],"while":[101],"resulting":[103],"alone":[105],"retains":[106],"48%":[107],"effect":[110],"even":[111],"after":[112],"removed.":[115],"This":[116,145],"suggests":[117],"can":[121],"carry":[122],"and":[123,143],"reconstruct":[124],"compliance":[126],"signal":[127],"independently.":[128],"These":[129],"findings":[130],"indicate":[131],"LRMs":[135],"jointly":[137],"encoded":[138],"residual":[140],"stream":[141],"activations":[142],"joint":[146],"makes":[148],"LRM":[149],"more":[150],"robust":[151],"against":[152],"activation-level":[153],"interventions":[154],"alone,":[155],"exposes":[157],"possible":[161],"alternative":[162],"surface":[163],"attack.":[164]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-28T00:00:00"}