Says Block, Still Acts: Why LLM Safety Judgments Fail to Govern Action in LLM Agents

arXiv:2609.35870 · cs.CR · Submitted 2026-09-26 · Read on arXiv

cs.CR

Submitted: 2026-09-26

Updated: 2026-09-26

Terminology

Calibration — 15× in this paper · explained in 7 episodes
Accuracy — 5× in this paper · explained in 1 episode
Alignment — 5× in this paper · explained in 1 episode
Steering — 5× in this paper · explained in 2 episodes
Aggregation — 3× in this paper · explained in 1 episode
Benchmark — 3× in this paper · explained in 2 episodes
Abstraction — 2× in this paper · explained in 1 episode
Activation Addition — 2× in this paper · explained in 1 episode
Activation Steering — 2× in this paper · explained in 4 episodes
Benchmarking — 2× in this paper · explained in 3 episodes
Provenance — 2× in this paper · explained in 3 episodes
Representation Engineering — 2× in this paper · explained in 2 episodes
Abstention — 1× in this paper · explained in 1 episode
Activation Patching — 1× in this paper · explained in 2 episodes
Agentic System — 1× in this paper · explained in 2 episodes
Consistency — 1× in this paper · explained in 3 episodes
Core — 1× in this paper · explained in 2 episodes
Generative AI — 1× in this paper · explained in 2 episodes
In-Context Learning — 1× in this paper · explained in 4 episodes
Interpretability — 1× in this paper · explained in 15 episodes
Linear probe — 1× in this paper · explained in 2 episodes
alpha — 1× in this paper · explained in 1 episode

Sources

Steering Language Models With Activation Engineering

Related papers