activity
20192025
most citedSleeper Agents: Training Deceptive LLMs that Persist Through Safety Training

39 citations · 46 across the 5 of their papers we have counts for

collaborators

5 papers

cs.LG2025

Forecasting Rare Language Model Behaviors

Erik Jones, Meg Tong, Jesse Mu +7

Standard language model evaluations can fail to capture risks that emerge only at deployment scale. For example, a model may produce safe responses during a small-scale beta test,…

cs.CL2025★ 7 cited

Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teaming

Mrinank Sharma, Meg Tong, Jesse Mu +40

Large language models (LLMs) are vulnerable to universal jailbreaks-prompting strategies that systematically bypass model safeguards and enable users to carry out harmful processes…

cs.LG2024

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach

Tony T. Wang, John Hughes, Henry Sleight +7

Defending large language models against jailbreaks so that they never engage in a broadly-defined set of forbidden behaviors is an open problem. In this paper, we investigate the d…

cs.CR2024★ 39 cited

Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training

Evan Hubinger, Carson Denison, Jesse Mu +36

Humans are capable of strategically deceptive behavior: behaving helpfully in most situations, but then behaving very differently in order to pursue alternative objectives when giv…

cs.CL2019

Learning Outside the Box: Discourse-level Features Improve Metaphor Identification

Jesse Mu, Helen Yannakoudakis, Ekaterina Shutova

Most current approaches to metaphor identification use restricted linguistic contexts, e.g. by considering only a verb's arguments or the sentence containing a phrase. Inspired by…