PRISM: Transfer and Limits of Activation Interventions in Tool-Calling Language Models
To investigate this hidden vulnerability, we introduce PRISM, a framework for evaluating the transfer of activation interventions across precision, languages, and scales.
ProofPaper ↗
Key points
- Recent literature shows that unsafe tool calls can often accompany textual refusals in language models.
- Our findings demonstrate that leveraging lower-resource settings (specifically quantized NF4 labels and cross-lingual transfer) offers a robust pathway to expose and improve model alignment.
- Furthermore, these alignment improvements transfer effectively across languages: five-language NF4-supervised directions successfully transfer to held-out Arabic, reducing unsafe violations in Llama-3.1-8B by 21.95 percentage points without target-language tuning.
- Ultimately, PRISM highlights how auxiliary supervision from compressed models and multilingual data can uncover and mitigate hazardous tool-calling behaviors across different model families.
Sources (1)
- [1]PRISM: Transfer and Limits of Activation Interventions in Tool-Calling Language ModelsarXiv (AI, ML, NLP, CV, robotics, multi-agent) · Oct 14, 06:55 PM
To investigate this hidden vulnerability, we introduce PRISM, a framework for evaluating the transfer of activation interventions across precision, languages, and scales.
Recent literature shows that unsafe tool calls can often accompany textual refusals in language models.
Extractive summary: sentences quoted from the sources.
Before this
- Oct 14, 2026mistralai/Timestral-209M
- Oct 14, 2026ReaDy: Recurrent States as Dynamic Context for Speculative Drafting in Hybrid Linear Attention Large Language Models
- Oct 14, 2026Sparse Autoencoders Are a Shared Coordinate System for Symbolic Matching
- Oct 14, 2026InfiniSplat v2: Analyzing and Improving Feed-Forward 3DGS from Any Views
- Oct 13, 2026Run fast, private agents on-device with LFM2.5-24B-A2B
- Oct 13, 2026SonicBoom: 52 tok/s decode on a laptop RTX 3050 (llama.cpp: 45) with the same quantized kernels, the difference is a graph compiler. No Python.