**Decoy Direction Optimization: A Post-Hoc Defense Against LLM Abliteration** >

**Decoy Direction Optimization: A Post-Hoc Defense Against LLM Abliteration**

> Safety guardrails in open-weight language models can be readily bypassed using Refusal Feature Ablation (RFA), a technique that identifies and projects out a linear refusal direction from the residual stream, often achieving a high attack success rate (ASR) while preserving model capability. Defending against these attacks typically requires computationally expensive safety finetuning for every new checkpoint. We int...

**来源信息**
- **来源**：HuggingFace Daily Papers（社区热门论文）
- **分类**：ai-models
- **发布时间**：2026-09-16 08:00（北京时间）
- **原文**：[打开原文](https://huggingface.co/papers/2609.16204)