Jailbreak Attack Initializations as Extractors of Compliance Directions

Amit Levi, Rom Himelstein, Yaniv Nemcovsky +2

Safety-aligned LLMs respond to prompts with either compliance or refusal, each corresponding to distinct directions in the model's activation space. Recent works show that initiali…