Agent Action Steering
Shows that activation steering vectors can compel a weak LLM agent to choose light colors or press its end-chat button, suggesting steering could control agent actions.
AI research and discussion on LessWrong. www.lesswrong.com
Shows that activation steering vectors can compel a weak LLM agent to choose light colors or press its end-chat button, suggesting steering could control agent actions.
Uses activation steering on gpt-oss-20b to show that shifting latent User-ness versus Tool-ness causally raises or lowers prompt-injection attack success, supporting the role-confusion explanation.
A white paper launching the Physical AI Safety Institute argues that robot foundation models pose neglected, tractable safety risks and calls for research on interpreting, aligning and controlling them.
Proposes that prompt injections exploit LLM role confusion, using role probes to show writing style overrides chat-template tags; introduces CoT Forgery, a jailbreak whose success tracks internal role perception.