Latent Adversarial Training (LAT) Improves the Representation of Refusal
Compares latent adversarial training with standard safety fine-tuning on how refusal is encoded in LLaMA 2 7B. LAT concentrates refusal in top SVD components, yielding more effective refusal-ablation vectors while staying most robust against self-ablation.