Jailbreaks Peak Early, Then Drop: Layer Trajectories in Llama-3.1-70B
Layer-wise analysis of Llama-3.1-70B finds jailbreak prompts show mid-layer harm signal that drops before output, unlike standard harmful prompts; the author notes structural confounds and calls for causal tests.