Research Papers 论文研究 7h ago Updated 3h ago 更新于 3小时前 48

GAPS: Dimension-Level Gates for Conditional Activation Steering GAPS:用于条件激活引导的维度级门控

GAPS introduces dimension-level conditioning to activation steering, adding a second axis of selectivity beyond token-level decisions to determine which neurons to intervene on Two training-free gates are combined: a static separability gate using AUROC to restrict steering to neurons with reliable concept information, and a dynamic posterior gate using a Gaussian model to steer only when activations better explain the undesired concept GAPS plugs into existing conditional methods (CAST, DSAS) w 提出GAPS方法,将激活引导的选择性从token级扩展到维度级,新增"干预哪些神经元"的决策轴 结合两个免训练门控:静态可分离性门控(AUROC筛选可靠概念维度)和动态后验门控(Gaussian模型判断当前激活状态) 开销仅O(D)每token,可无缝集成到CAST、DSAS等现有条件激活引导方法 在Gemma-3(4B)和Qwen-3(1.7B)上验证,DSAS+GAPS将毒性率从6.52%降至0.48%,显著优于基线

62
Hot 热度
75
Quality 质量
68
Impact 影响力

Analysis 深度分析

TL;DR

  • GAPS introduces dimension-level conditioning to activation steering, adding a second axis of selectivity beyond token-level decisions to determine which neurons to intervene on
  • Two training-free gates are combined: a static separability gate using AUROC to restrict steering to neurons with reliable concept information, and a dynamic posterior gate using a Gaussian model to steer only when activations better explain the undesired concept
  • GAPS plugs into existing conditional methods (CAST, DSAS) with only O(D) overhead per token
  • On toxicity mitigation and concept removal benchmarks with Gemma-3 (4B) and Qwen-3 (1.7B), GAPS consistently matches or improves the Pareto front of token-level counterparts
  • DSAS+GAPS reduces Gemma-3's toxicity rate from 6.52% to 0.48% under a fixed capability budget, versus 3.52% for DSAS alone, with ablations attributing most gains to the posterior gate

Why It Matters

This work addresses a key limitation in activation steering—once a conditional method decides to intervene at a token, it applies the full dense steering vector uniformly across all hidden dimensions, wasting capacity on neurons that either lack concept-relevant information or are already in the desired regime. By introducing dimension-level selectivity, GAPS significantly improves the behavior-capability trade-off without requiring additional training, making it a practical upgrade for existing steering pipelines used in safety-critical LLM deployments.

Technical Details

  • Static separability gate: Uses AUROC computed on hidden dimension activations to identify neurons with statistically reliable concept information, filtering out dimensions that do not meaningfully encode the target concept
  • Dynamic posterior gate: Models each neuron's activation as a Gaussian distribution under competing concepts and steers only when the current activation is better explained by the undesired concept, enabling per-token, per-dimension decisions
  • Plug-and-play design: The gates add O(D) overhead per token (where D is the hidden dimension size) and integrate seamlessly into existing conditional steering methods like CAST and DSAS without retraining
  • Evaluation: Tested on RealToxicityPrompts (toxicity mitigation) and OneSeC (concept removal) across Gemma-3 (4B) and Qwen-3 (1.7B), demonstrating consistent Pareto front improvements over token-level-only methods
  • Ablation findings: The posterior gate accounts for the majority of performance gains, suggesting that dynamic, activation-aware conditioning is more critical than static separability filtering

Industry Insight

  • Training-free dimension-level gating offers a low-cost, high-impact upgrade path for existing activation steering systems—teams already using CAST or DSAS can adopt GAPS without retraining or architectural changes
  • The Gaussian posterior approach generalizes beyond toxicity to any binary concept steering task, making it broadly applicable for alignment and safety interventions across model families
  • As LLMs scale, the O(D) overhead becomes increasingly relevant; future work should explore sparse or low-rank approximations of the gates to maintain efficiency on larger models

TL;DR

  • 提出GAPS方法,将激活引导的选择性从token级扩展到维度级,新增"干预哪些神经元"的决策轴
  • 结合两个免训练门控:静态可分离性门控(AUROC筛选可靠概念维度)和动态后验门控(Gaussian模型判断当前激活状态)
  • 开销仅O(D)每token,可无缝集成到CAST、DSAS等现有条件激活引导方法
  • 在Gemma-3(4B)和Qwen-3(1.7B)上验证,DSAS+GAPS将毒性率从6.52%降至0.48%,显著优于基线

为什么值得看

激活引导是LLM行为对齐的关键技术,但现有方法在干预粒度上存在明显局限。GAPS从维度级别精细化控制策略,为行为-能力权衡提供了无需额外训练的高效优化路径,对实际部署中的安全控制具有直接参考价值。

技术解析

  • 核心创新:在现有条件激活引导(如CAST、DSAS)仅决定"何时干预"的基础上,引入维度级条件作为补充选择性轴,决定"对哪些神经元干预"
  • 静态可分离性门控:通过AUROC评估每个隐藏维度对目标概念的统计区分能力,仅对信息可靠的维度施加引导向量,避免对无关维度造成干扰
  • 动态后验门控:在每步生成时,基于Gaussian模型判断当前激活更可能属于期望概念还是不良概念分布,仅对"更可能不良"的维度进行引导
  • 实验验证:在RealToxicityPrompts(毒性缓解)和OneSeC(概念移除)两个基准上测试Gemma-3(4B)和Qwen-3(1.7B),GAPS一致匹配或改善Pareto前沿;DSAS+GAPS在固定能力预算下将Gemma-3毒性率从6.52%(DSAS alone)降至0.48%,消融实验表明增益主要来自后验门控

行业启示

  • 激活引导的精细化是明确趋势:从token级到维度级的条件控制,能在不增加训练成本的前提下显著提升干预精度,值得在安全对齐管线中优先探索
  • 免训练方法更具工程实用价值:GAPS无需额外微调即可叠加到现有方法,降低了落地门槛,适合快速迭代的安全增强场景
  • 行为-能力权衡需多维度优化:单纯优化干预时机不够,干预粒度(哪些维度)同样关键,未来工作可沿此方向进一步挖掘Pareto前沿

Disclaimer: The above content is generated by AI and is for reference only. 免责声明:以上内容由 AI 生成,仅供参考。

LLM 大模型 Alignment 对齐 Research 科学研究