{"id":"https://openalex.org/W7165619295","doi":"https://doi.org/10.48550/arxiv.2606.22676","title":"Skin-Deep: A Geometric Diagnostic for Alignment Fragility in Large Language Model Representations","display_name":"Skin-Deep: A Geometric Diagnostic for Alignment Fragility in Large Language Model Representations","publication_year":2026,"publication_date":"2026-06-21","ids":{"openalex":"https://openalex.org/W7165619295","doi":"https://doi.org/10.48550/arxiv.2606.22676"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.22676","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.22676","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.22676","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033836068","display_name":"D Lee","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lee, Dongyub Jude","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035555716","display_name":"Jungseob Lee","orcid":"https://orcid.org/0000-0002-9431-6342"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lee, Jungseob","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139159141","display_name":"Seungyoon Lee","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lee, Seungyoon","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139166120","display_name":"Seongtae Hong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hong, Seongtae","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031247574","display_name":"Suhyune Son","orcid":"https://orcid.org/0000-0002-5835-5635"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Son, Suhyune","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080903430","display_name":"Sugyeong Eo","orcid":"https://orcid.org/0000-0002-8008-6160"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Eo, Sugyeong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014883878","display_name":"Jaehyung Seo","orcid":"https://orcid.org/0000-0002-4761-9818"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Seo, Jaehyung","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5139188469","display_name":"Heuiseok Lim","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lim, Heuiseok","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.39969998598098755,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.39969998598098755,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.11909999698400497,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.09440000355243683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fragility","display_name":"Fragility","score":0.7635999917984009},{"id":"https://openalex.org/keywords/flagging","display_name":"Flagging","score":0.7081000208854675},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.6007999777793884},{"id":"https://openalex.org/keywords/subspace-topology","display_name":"Subspace topology","score":0.5595999956130981},{"id":"https://openalex.org/keywords/softmax-function","display_name":"Softmax function","score":0.3481999933719635},{"id":"https://openalex.org/keywords/geometric-modeling","display_name":"Geometric modeling","score":0.3278000056743622},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.3131999969482422}],"concepts":[{"id":"https://openalex.org/C80191262","wikidata":"https://www.wikidata.org/wiki/Q5477668","display_name":"Fragility","level":2,"score":0.7635999917984009},{"id":"https://openalex.org/C2777548347","wikidata":"https://www.wikidata.org/wiki/Q5456937","display_name":"Flagging","level":2,"score":0.7081000208854675},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.6007999777793884},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5774000287055969},{"id":"https://openalex.org/C32834561","wikidata":"https://www.wikidata.org/wiki/Q660730","display_name":"Subspace topology","level":2,"score":0.5595999956130981},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.382099986076355},{"id":"https://openalex.org/C188441871","wikidata":"https://www.wikidata.org/wiki/Q7554146","display_name":"Softmax function","level":3,"score":0.3481999933719635},{"id":"https://openalex.org/C104065381","wikidata":"https://www.wikidata.org/wiki/Q1002535","display_name":"Geometric modeling","level":2,"score":0.3278000056743622},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.3131999969482422},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.2948000133037567},{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.2937000095844269},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.29280000925064087},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.2921000123023987},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.2881999909877777},{"id":"https://openalex.org/C2780665704","wikidata":"https://www.wikidata.org/wiki/Q959298","display_name":"Intervention (counseling)","level":2,"score":0.2806999981403351},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.2791999876499176},{"id":"https://openalex.org/C24858836","wikidata":"https://www.wikidata.org/wiki/Q844718","display_name":"Theory of computation","level":2,"score":0.257999986410141}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.22676","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.22676","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.22676","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.22676","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Alignment":[0],"tuning":[1],"is":[2,25,79,102],"meant":[3],"to":[4,64,120],"make":[5],"harmful-request":[6,151],"refusal":[7,37,45,55,161,177,194],"robust,":[8],"yet":[9],"this":[10,66,148],"safety":[11,108,136],"behavior":[12,195],"can":[13,35],"be":[14],"erased":[15],"by":[16],"a":[17,26,33,84,111,133,187],"small":[18],"set":[19],"of":[20],"benign":[21],"fine-tuning":[22,77],"examples.":[23],"This":[24],"deployment":[27],"risk":[28],"for":[29,191],"open-weight":[30],"models":[31,123],"because":[32],"checkpoint":[34],"pass":[36],"tests":[38],"at":[39],"release":[40],"time":[41],"and":[42,104,128],"later":[43],"lose":[44],"under":[46],"low-cost":[47],"downstream":[48],"fine-tuning.":[49,181],"Prior":[50],"work":[51],"has":[52],"established":[53],"these":[54],"failures,":[56],"but":[57],"existing":[58],"studies":[59],"do":[60],"not":[61],"show":[62,143],"how":[63],"detect":[65],"fragility":[67,90],"in":[68,147],"the":[69,93,106,114,157,169,175],"aligned":[70,94],"model":[71,139,172],"itself":[72],"before":[73,98,166],"an":[74,100,198],"attack":[75],"or":[76],"intervention":[78,101],"run.":[80],"We":[81],"introduce":[82],"Skin-Deep,":[83],"geometric":[85],"diagnostic":[86,190],"that":[87,144,156,173],"detects":[88],"alignment":[89,126],"directly":[91],"from":[92],"model's":[95],"hidden-state":[96],"activations":[97],"such":[99],"run":[103],"compresses":[105],"layer-wise":[107],"geometry":[109,159],"into":[110],"single":[112],"scalar,":[113],"Geometric":[115],"Fragility":[116],"Score":[117],"(GFS).":[118],"Applied":[119],"twenty-one":[121],"instruction-tuned":[122],"spanning":[124],"six":[125],"recipes":[127],"3B--32B":[129],"parameters,":[130],"Skin-Deep":[131],"reveals":[132],"recurring":[134],"low-rank":[135],"subspace":[137,149],"across":[138],"families.":[140],"Direction":[141],"ablations":[142],"removing":[145],"directions":[146],"weakens":[150],"refusal,":[152],"providing":[153],"causal":[154],"evidence":[155],"recovered":[158],"underlies":[160],"behavior.":[162],"Crucially,":[163],"GFS":[164,185],"identifies,":[165],"any":[167],"fine-tuning,":[168],"initially":[170],"safe":[171],"retains":[174],"most":[176],"after":[178],"small-scale":[179],"LoRA":[180],"These":[182],"results":[183],"establish":[184],"as":[186],"practical":[188],"pre-deployment":[189],"flagging":[192],"fragile":[193],"without":[196],"running":[197],"attack.":[199]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-24T00:00:00"}